# security-case-management

> Claude/Codex skill by [@elastic](https://omgskills.com/library/elastic/index.md) · 4 stars · Updated 2026-10-23

Create, search, update, and manage SOC cases via the Kibana Cases API. Use when tracking incidents, linking alerts to cases, adding investigation notes, or managing triage output.

## Install

```sh
git clone https://github.com/elastic/claude-plugin /tmp/claude-plugin && ln -s /tmp/claude-plugin/skills/security/case-management ~/.claude/skills/security-case-management
```

## From README

Case Management Manage SOC cases through the Kibana Cases API. All cases are scoped to securitySolution — this skill operates exclusively within Elastic Security. Cases appear in Kibana Security and can be assigned to analysts, linked to alerts, and pushed to external incident management systems via connectors.

## Links

- HTML page: https://omgskills.com/library/elastic/claude-plugin/skills/security/case-management/
- GitHub: https://github.com/elastic/claude-plugin
- Author: [@elastic](https://omgskills.com/library/elastic/index.md)

## More from this repo

- [cloud-onboarding](https://omgskills.com/library/elastic/claude-plugin/skills/cloud/onboarding/index.md) — Onboard an Elastic Cloud organization: configure the \`elastic\` CLI's Cloud context and API key, establish a default...
   - [@elastic](https://omgskills.com/library/elastic/index.md) · 4 stars
- [cloud-provisioning](https://omgskills.com/library/elastic/claude-plugin/skills/cloud/provisioning/index.md) — Provision and operate Elastic Cloud infrastructure: create, connect to, update, and delete Serverless projects...
   - [@elastic](https://omgskills.com/library/elastic/index.md) · 4 stars
- [elasticsearch-anomaly-detection](https://omgskills.com/library/elastic/claude-plugin/skills/elasticsearch/elasticsearch-anomaly-detection/index.md) — Used to create and manage Elastic ML anomaly detection jobs via the API.
   - [@elastic](https://omgskills.com/library/elastic/index.md) · 4 stars