Investigate Incident

Description

--- name: investigate-incident disable-model-invocation: true argument-hint: "[threat_type_or_keyword] [since_hours]" description: "Investigate security incidents using Z-Insights analytics -- threats, firewall actions, shadow IT, and web traffic." --- # Investigate Security Incident Investigate: **$ARGUMENTS** ## Step 1: Parse Input Extract: - **Threat type or keyword** (e.g., "malware", "phishing", "ransomware", a specific IP or domain) - **Time window** in hours (default: 24) ## Step 2:

Installation

Installs to ~/.claude/skills/zscaler-zscaler-mcp-server-investigate-incident/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.