AI skillSplunk
Splunk AI security skills
Alert triage, SPL drafting, detection tuning, incident timelines, and SOC handoffs.
Security tool skills
AI skills for the security tools teams already use.
Practical, evidence-first workflows for using AI with SIEM, CNAPP, endpoint, identity, AppSec, vulnerability management, and model gateway tools without losing control.
AI skillWiz
Wiz AI security skills
Attack path summaries, exposure prioritization, cloud ownership, and remediation planning.
AI skillPalo Alto Networks
Palo Alto Networks AI security skills
Firewall policy review, Prisma Cloud risk summaries, Cortex investigations, and change review.
AI skillCrowdStrike
CrowdStrike AI security skills
Endpoint process tree summaries, containment notes, threat hunting, and incident updates.
AI skillMicrosoft Sentinel
Microsoft Sentinel AI security skills
KQL query drafting, incident summaries, Microsoft 365 investigations, and automation review.
AI skillOkta
Okta AI security skills
Suspicious login review, policy analysis, access review, identity incident recovery, and blast-radius summaries.
AI skillGitHub
GitHub AI security skills
Pull request security review, code scanning triage, secret response, dependency review, and CI/CD checks.
AI skillTrivy
Trivy AI security skills
Vulnerability clustering, container triage, SBOM review, IaC remediation, and risk briefs.
AI skillLiteLLM
LiteLLM AI security skills
Model gateway policy review, virtual key control, token budgets, prompt log triage, and provider routing.
Operating model
Use AI to compress evidence, not replace evidence.
Keep the tool as system of record
Splunk events, Wiz graph paths, CrowdStrike detections, Okta logs, GitHub alerts, and Trivy findings should remain traceable in every AI-generated summary.
Require approval for action
Let AI draft queries, tickets, summaries, and remediation plans. Keep containment, policy changes, identity changes, and production deploys behind human review.