Triages security alerts in Splunk Enterprise Security by classifying severity, investigating notable events, correlating related telemetry, and making escalation or closure decisions using SPL queries and the Incident Review dashboard.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill triaging-security-alerts-in-splunknpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill triaging-security-alerts-in-splunk -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill triaging-security-alerts-in-splunk -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/triaging-security-alerts-in-splunkgh skill install mukul975/Anthropic-Cybersecurity-Skills triaging-security-alerts-in-splunkgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/triaging-security-alerts-in-splunk ~/.claude/skills/triaging-security-alerts-in-splunk # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/triaging-security-alerts-in-splunk ~/.agents/skills/triaging-security-alerts-in-splunk # Codex, Cursor, Gemini CLI, Copilot, OpenCode