/secops-triage
Google SecOps 資安警示分流的專家指引。用於分流警示、判斷誤報或真報、評估實體風險、調整警示嚴重度與優先順序，以及關閉或升級警示與 case。
- 安裝次數
- 2300
- 專案星數
- 2.2 萬 ★
- 授權
- Apache-2.0
- 專案更新
- 2026-11-02
怎麼裝
npx skills add https://github.com/google/skills --skill secops-triage安裝前請先看過原文內容。中文說明是 AI 翻譯，不保證安全。
原文
Expert guidance for security alert triage in Google SecOps. Use when investigating and triaging security alerts, determining false positives vs. true positives, assessing entity risk, adjusting alert severity or priority, and closing or escalating alerts and cases. Don't use for deep multi-hop incident investigations across host timelines (use secops-investigate), proactive threat hunting or retroactive IoC sweeps (use secops-hunt), or authoring new detection rules (use secops-detection-engineering).