30 tagged elastic, measured the same way as everything else here.
Browse within: docs 21
Masriyan/Claude-Code-CyberSecurity-Skill
Skill Claude CodeCodex
Security log parsing, anomaly detection, SIEM query building, Sigma rule creation, and correlation rule development across Splunk, Elastic, QRadar, and Microsoft Sentinel.
Skill Claude CodeCodex
Validate and generate appliesto tags in Elastic documentation, including for cumulative docs across versions and deployment types. Use when writing new docs pages, reviewing existing pages for correct appliesto usage, deciding whether to preserve or replace existing version-scoped content, or when content changes…
Skill Claude CodeCodex
Suggest improved text for changelog YAML files against current Elastic standards. Mirrors the pattern catalog from docs-review-changelog to provide consistent fixes. Includes type-title alignment, product/surface context for titles, description verb-tense (third-person present), and technical content assessment.…
Skill Claude CodeCodex
Draft or update Elastic Workflows documentation pages in explore-analyze/workflows/ — step references, use cases, how-tos, concepts, and overviews. Use when writing Workflows docs, documenting a step type, turning workflow YAML into documentation, drafting from a doc issue in docs-content or docs-content-internal, or…
elastic/example-mcp-app-security
Skill Claude CodeCodex
Triage Elastic Security alerts — fetch, investigate, classify threats, create cases, and acknowledge. Use when triaging alerts, performing SOC analysis, investigating detections, reviewing security incidents, or when the user mentions ransomware, malware, lateral movement, credential theft, DLL injection, suspicious…
elastic/example-mcp-app-security
Skill Claude CodeCodex
Triage Elastic Security Attack Discovery findings — fetch correlated attack narratives, assess confidence with entity risk and rule frequency signals, and present an interactive triage dashboard for approval, case creation, and acknowledgment. Use when triaging attack discoveries, reviewing correlated attacks…
elastic/example-mcp-app-security
Skill Claude CodeCodex
Create, search, update, and manage SOC cases for Elastic Security. ALWAYS use this skill when the user mentions cases, incidents, investigations, or asks to see, show, list, open, create, update, or search cases. Trigger for: "show me my cases", "open cases", "list cases", "any open cases", "create a case", "case for…
Skill Claude CodeCodex
Query Elasticsearch and Kibana via the Kibana console proxy API. Use this skill whenever the user asks to search logs, query Elasticsearch indices, list indices, view dashboards, check Kibana status, or investigate production issues in the Elastic stack. Also use when the user mentions Kibana, Elasticsearch, ES, logs…
Skill Claude CodeCodex
Use this skill when working with Elasticsearch in any capacity — designing index mappings, writing or optimizing queries (Query DSL, ES|QL, KQL), planning cluster architecture, configuring ingest pipelines, tuning performance, troubleshooting cluster health, implementing search features, or building AI-powered search…