IT & Security Prompts to Save Time On Repetitive Tasks

Triage security alerts by severity and false positive likelihood. Assess indicators, context, and business impact.

Build chronological incident timeline from logs. Normalize timestamps, identify first malicious action, map lateral movement.

Build decision framework for escalating to IR, threat intel, or law enforcement based on alert characteristics.

Create repeatable playbooks for common alerts with roles, data collection, investigation checks, escalation triggers.

Investigate false positive triggers. Identify legitimate activities to whitelist. Tune baselines and thresholds.

Create standard handoff template for handing incidents to IR: summary, timeline, evidence, IOCs, open questions.

Design standardized shift handoff reports: closed incidents, ongoing investigations, escalations, tool issues, alert changes.

Design patch management process with clear SLAs, test environments, rollback plans, compliance reporting.

Implement centralized certificate lifecycle management with automation, monitoring, and revocation procedures.

Assess audit readiness by documenting controls, gathering evidence, identifying gaps, preparing audit team.

Design secure password reset with identity verification, complexity enforcement, session invalidation, logging.

Create process for receiving and triaging phishing reports: capture details, immediate action, containment, feedback.

Create troubleshooting guide for VPN and remote access issues with step-by-step user instructions.

Create device hardening checklist for provisioning: encryption, antivirus, firewall, updates, VPN, backup.

Create procedure for recognizing security-relevant incidents and escalating to security team while preserving evidence.

Triage vulnerabilities by CVSS, business context, mitigating controls, and risk. Assign SLAs based on risk score.

Investigate false positive scan findings to confirm whether vulnerability is actually exploitable.

Manage application dependencies: inventory SBOM, scan for vulnerabilities, prioritize updates, test, track metrics.