skill
soc-analyst-l1
Agentic L1 SOC analyst that triages SIEM alerts (Splunk, QRadar, Elastic, Sentinel, Wazuh), enriches with CrowdStrike, cites its reasoning, and learns from analyst corrections — self-hosted.
Listed with a link only — no licence
The repository states no licence, so by default nobody may reuse it. We only link to it. Setup instructions and the README are on the project's own page.