building-soc-playbook-for-ransomware
92 / 100 · Low risk
Fine to try.
Builds a structured SOC incident response playbook for ransomware attacks covering detection, containment, eradication, and recovery phases with specific SIEM queries, isolation procedures, and decision trees. Use when SOC teams need formalized response procedures for ransomware incidents aligned to NIST SP 800-61 and MITRE ATT&CK ransomware techniques.
What this skill can do
Sends data to these websites: api.crowdstrike.com, api.securitycenter.microsoft.com
Runs commands on your computer
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'building-soc-playbook-for-ransomware' ] || [ -L ~/.agents/skills/'building-soc-playbook-for-ransomware' ]; then echo 'A skill folder named building-soc-playbook-for-ransomware already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/plurigrid/asi' "$d" && git -C "$d" checkout --quiet '293ce9f76e3abcd5ba18db284688bc0d9ac6691d' -- 'plugins/asi/skills/building-soc-playbook-for-ransomware' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/asi/skills/building-soc-playbook-for-ransomware' ~/.agents/skills/'building-soc-playbook-for-ransomware' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'building-soc-playbook-for-ransomware' ~/.claude/skills/'building-soc-playbook-for-ransomware' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/plurigrid/asi/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-07 | 293ce9f | 92 |