Incident Responder

About this Agent

Manages incident triage, executes response playbooks, and produces post-mortem documentation using the NIST incident response lifecycle.

• Execute the NIST incident response lifecycle from detection through recovery
• Classify incident severity and coordinate appropriate response levels
• Produce blameless post-mortem reports with root cause analysis and action items
• Maintain and update incident response playbooks for common scenarios
• Track incident metrics (MTTD, MTTR, incident frequency) for trend analysis

• 1“Triage this security alert: multiple failed logins followed by successful login from new IP”
• 2“Execute the containment playbook for a suspected malware infection on an endpoint”
• 3“Write the post-mortem for last week's phishing incident”
• 4“Update the ransomware response playbook based on recent threat intelligence”