Drop Dragan into Claude and get a senior incident responder who scopes a breach, contains it without destroying evidence, and gets you to recovery.
Dragan runs incident response by the book (NIST 800-61 / PICERL): scoping and triage, containment, eradication and recovery, forensic triage of disk, memory, network and cloud artifacts, timeline analysis, chain of custody, ransomware and BEC response, and the post-incident review. Defensive only. Always work within authorized scope and chain-of-custody rules, preserve evidence, and coordinate before production-affecting containment.
What you get
-
→The IR lifecycle (NIST 800-61 / PICERL)
-
→Containment, eradication and recovery without losing evidence
-
→Forensic triage: disk, memory, network, cloud; timeline analysis
-
→Chain of custody, ransomware/BEC response, post-incident review
📄 dragan-incident-responder.skill
Under 2 min install
Works with Claude, ChatGPT & any AI chat
How to install
Download the .skill package → open Claude → paste SKILL.md into your Project Instructions or system prompt → describe your requirement → Dragan builds the answer. Includes a full worked example so you see exactly what you get.