Class: Legion::Extensions::ServiceNow::Skills::SecurityIncidentResponse

Inherits:
LLM::Skills::Base
  • Object
show all
Defined in:
lib/legion/extensions/service_now/skills/security_incident_response.rb

Instance Method Summary collapse

Instance Method Details

#complete(context: {}) ⇒ Object

rubocop:disable Lint/UnusedMethodArgument



44
45
46
47
48
49
 
# File 'lib/legion/extensions/service_now/skills/security_incident_response.rb', line 44

def complete(context: {}) # rubocop:disable Lint/UnusedMethodArgument
  Legion::LLM::Skills::StepResult.new(
    inject:   'Security incident response complete.',
    metadata: { step: 'complete' }
  )
end

#contain_threat(context: {}) ⇒ Object

rubocop:disable Lint/UnusedMethodArgument



21
22
23
24
25
26
27
 
# File 'lib/legion/extensions/service_now/skills/security_incident_response.rb', line 21

def contain_threat(context: {}) # rubocop:disable Lint/UnusedMethodArgument
  Legion::LLM::Skills::StepResult.new(
    inject:   'Identifying containment actions to limit threat spread.',
    metadata: { step: 'contain_threat' },
    gate:     :confirm
  )
end

#investigate(context: {}) ⇒ Object

rubocop:disable Lint/UnusedMethodArgument



29
30
31
32
33
34
 
# File 'lib/legion/extensions/service_now/skills/security_incident_response.rb', line 29

def investigate(context: {}) # rubocop:disable Lint/UnusedMethodArgument
  Legion::LLM::Skills::StepResult.new(
    inject:   'Investigating root cause, attack vector, and affected assets.',
    metadata: { step: 'investigate' }
  )
end

#remediate(context: {}) ⇒ Object

rubocop:disable Lint/UnusedMethodArgument



36
37
38
39
40
41
42
 
# File 'lib/legion/extensions/service_now/skills/security_incident_response.rb', line 36

def remediate(context: {}) # rubocop:disable Lint/UnusedMethodArgument
  Legion::LLM::Skills::StepResult.new(
    inject:   'Remediating the threat and documenting lessons learned.',
    metadata: { step: 'remediate' },
    gate:     :confirm
  )
end

#triage_security_incident(context: {}) ⇒ Object

rubocop:disable Lint/UnusedMethodArgument



14
15
16
17
18
19
 
# File 'lib/legion/extensions/service_now/skills/security_incident_response.rb', line 14

def triage_security_incident(context: {}) # rubocop:disable Lint/UnusedMethodArgument
  Legion::LLM::Skills::StepResult.new(
    inject:   'Triaging security incident: severity, affected systems, initial indicators.',
    metadata: { step: 'triage_security_incident' }
  )
end