Works with the AI tools you already use
Claude Code
Cursor
Codex CLI
GitHub Copilot
Gemini CLI+17 moreClaude CodeCursorCodex CLIGitHub CopilotGemini CLI
VS Code
Windsurf
Manus+14 moreRansomware Response Coordinator
Professional-grade orchestration for ransomware triage, containment, recovery planning, and executive reporting.
Secure checkout via Stripe
See it in action
You say
We have a confirmed ransomware incident affecting 40 endpoints and three file servers. The ransom note appeared six hours ago. We have offline backups but have not yet validated their integrity. The incident commander is engaged. Produce a containment action tracker, evidence preservation checklist, and an initial executive update.
Your agent does
The skill produces a confirmed incident summary with status, confidence level, and evidence base, an immediate containment priority list covering isolation, account control, lateral movement reduction, and backup protection, an evidence preservation checklist, a backup and recovery status section with clean restore validation points, and an executive update draft noting confirmed facts, unknowns, business impact, and next decision points. Legal, regulatory, and insurance escalation flags are clearly marked for specialist handling.
What you get
About this skill
What it does
The Ransomware Response Coordinator is a specialized incident response (IR) framework designed to guide cybersecurity professionals through the critical stages of a ransomware crisis. It orchestrates the transition from initial detection to forensic preservation, containment, and recovery planning by synthesizing evidence like ransom notes, logs, and asset context.
Why use this skill
Unlike generic AI prompts that provide surface-level advice, this skill enforces strict defensive protocols and enterprise-grade IR methodologies. It ensures that security teams don't miss critical steps like checking backup immutability or preserving forensic evidence before containment. It handles the "fog of war" by separating confirmed facts from assumptions, helping leads provide clear updates to legal, insurance, and executive stakeholders.
Supported Workflows
- Triage: Validating indicators of compromise (IOCs) and mass encryption events.
- Containment: Prioritizing lateral movement reduction and identity isolation.
- Recovery: Developing decision matrices for clean restores vs. system rebuilds.
- Reporting: Generating executive summaries, forensic trackers, and post-incident hardening plans.
The skill is product-agnostic and adapts to your specific stack, whether you use Splunk, CrowdStrike, Veeam, or SentinelOne.
How to install
Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean 3 months ago
- One-time purchase, yours forever