Security Alert Triage

---
name: Security Alert Triage
description: Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge. Use when triaging alerts, performing SOC analysis, or investigating detections.
---

# Security Alert Triage

Part of the **Elastic Agent Skills** pack by Elastic (`elastic/agent-skills`).

Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge. Use when triaging alerts, performing SOC analysis, or investigating detections.

This catalog entry summarizes the skill for discovery. Get the full skill — including any bundled scripts and resources — from the source:

Full skill & source: https://github.com/elastic/agent-skills/tree/main/skills/security/alert-triage