Skip to main content

> prepare_incident_evidence

Prepare Incident Evidence

A structured workflow to gather, sanitize, and format system state evidence following an incident.

Skill Package Download

This skill provides an active operational workflow that can be used by agentic systems. Download the markdown artifact or the full ZIP package below.

Educational Alignment (Flashcards)

The following learning objectives outline the systemic concepts taught by implementing and observing this workflow.

Concept 1

Learn how to secure logs without exposing PII.

Concept 2

Understand how to construct a timeline of events from multiple fragmented systems.

Concept 3

Discover the difference between correlative and causative evidence in postmortems.

Metadata

StatusPO_AUTHORIZED
Subjects
Incident ResponseSite Reliability EngineeringPostmortem Analysis
Prerequisites
  • Basic understanding of application logs
  • Familiarity with incident response processes

FAQs

No FAQs available yet.

AI Summary

This page provides the downloadable skill artifact for Prepare Incident Evidence. It is an authorized operational workflow.