Incident Response

6 agents · 5 workflows · 0 skills.

Agents

• Dispatch — Incident Handler
• Trace — Forensic Analyst
• Scalpel — Malware Analyst
• Oracle — Threat Intelligence Analyst
• Surge — Quick Responder
• Stratus — Cloud Security Specialist

Workflows

• spectra-incident-handling — Full incident handling workflow following NIST 800-61. Use when the user says “handle incident” or “incident response”.
• spectra-digital-forensics — Digital forensics workflow. Use when the user says “forensic analysis” or “analyze evidence”.
• spectra-malware-analysis — Malware analysis workflow. Use when the user says “analyze malware” or “reverse engineer sample”.
• spectra-threat-intel-workflow — Threat intelligence workflow. Use when the user says “threat intel” or “analyze campaign”.
• spectra-cloud-incident-response — Cloud incident response workflow. Use for AWS, Azure, GCP, Kubernetes, and SaaS incident triage, blast-radius analysis, containment planning, evidence, and recovery.