Nist

The conducting-post-incident-lessons-learned skill helps Incident Response teams run structured after-action reviews, build factual timelines, identify root causes, capture what worked and failed, and turn each incident into measurable improvements with owners, deadlines, and playbook updates.

building-soc-playbook-for-ransomware skill for SOC teams that need a structured ransomware response playbook. It covers detection triggers, containment, eradication, recovery, and audit-ready procedures aligned to NIST SP 800-61 and MITRE ATT&CK. Use it for practical playbook creation, tabletop exercises, and Security Audit support.