Documentos

Use this skill when working with NinjaOne alerts - viewing active conditions, dismissing alerts, and understanding alert severity levels. Alerts indicate device issues that require technician attention.

Use this skill when resolving Blumira findings, choosing the correct resolution type, or understanding resolution workflows and their impact on security metrics.

Use this skill when working with Rootly on-call management - viewing shift metrics, generating handoff summaries, reviewing shift incidents, detecting on-call health risk, and understanding schedule coverage. Covers the get_oncall_handoff_summary, get_oncall_shift_metrics, get_shift_incidents, and check_oncall_health_risk MCP tools.

Use this skill when working with RocketCyber application inventory - detecting, categorizing, and monitoring applications across managed endpoints. Covers application discovery, approved vs unapproved applications, app-level threat detection, and software compliance reporting.

Use this skill when working with Abnormal Security threat detection and analysis - BEC, phishing, malware, socially-engineered attacks, spam, graymail, and credential theft. Covers threat types, attack vectors, severity assessment, remediation actions, and investigation workflows. Essential for MSP security analysts investigating email-borne threats detected by Abnormal Security's AI-powered behav

Use this skill when working with QuickBooks Online payments - recording customer payments, applying payments to invoices, handling overpayments, refunds, credit memos, and payment reconciliation. Covers payment methods, deposit tracking, unapplied payments, and MSP payment collection workflows.

Use this skill when working with PagerDuty analytics -- incident analytics, MTTA and MTTR metrics, service-level performance, team workload reporting, and operational maturity assessment.

Use this skill when working with Huntress security signals — monitoring, listing, filtering, and investigating signals across managed endpoints.

Use this skill when working with Auvik device records - identifying device types, interpreting manageStatus, reading lifecycle and warranty fields, and choosing between the v1 list endpoint and the detailed device endpoints.

Use this skill when working with ThreatLocker computer groups — the policy-scoping boundary that determines which allow/deny rules apply to which endpoints. Covers listing groups, mapping computer to group, and the difference between the dropdown and full list endpoints.

Use this skill when working with Sherweb distributor billing - payable charges, billing periods, charge types, pricing breakdown, deductions, fees, taxes, invoices, and MSP margin calculations. Covers Setup, Recurring, and Usage charge types, billing cycles (OneTime, Monthly, Yearly), and pricing fields (listPrice, netPrice, prorated, subTotal).

Use this skill when working with SentinelOne PowerQuery and the Singularity Data Lake - executing threat hunting queries, understanding PowerQuery pipeline syntax, managing time ranges, and analyzing query results. Covers the powerquery, get_timestamp_range, and iso_to_unix_timestamp tools, query syntax reference, common hunting scenarios, and integration with Purple AI for query generation.