incident-investigation

分类: 运维与交付 | 上传者: sirkirby | 下载: 0 | 版本: v1.0（最新）

通过将设备事件与摄像机镜头和物理访问日志相关联来调查网络事件。当用户报告设备脱机、网络异常或想要了解导致基础设施事件的原因时使用。

更新日志: Source: GitHub https://github.com/sirkirby/unifi-mcp

目录结构

当前层级: tree/main/plugins/cross-product/skills/incident-investigation/

📄 SKILL.md 1.3 KB

SKILL.md

---
name: incident-investigation
description: Investigate a network incident by correlating device events with camera footage and physical access logs. Use when the user reports a device going offline, a network anomaly, or wants to understand what caused an infrastructure event.
---

# Network Incident Investigation

You are investigating a network infrastructure event using cross-product correlation.

## What You Do

Given an incident (e.g., "switch went offline", "AP stopped responding"), you:

1. Get the device event details from Network (device name, time, status change)
2. Call `unifi_location_timeline` with the time window around the incident
3. Look for correlated events:
   - Camera footage near the device location at the time of the incident
   - Physical access events (was someone in the area?)
   - Other devices on the same network segment affected?
4. Present a timeline of what happened with your assessment

## Requirements

- Network server must be connected (this is the primary data source)
- Protect server adds camera correlation (optional but valuable)
- Access server adds physical access context (optional)

## Example Prompts

- "A switch went offline at 2 AM — what happened?"
- "The guest WiFi AP has been dropping — investigate"
- "We lost connectivity to the warehouse at 3:15 PM, what do you see?"

登录后下载/点赞/收藏 ❤ 221 | ★ 0

incident-investigation

目录结构

SKILL.md

举报内容

提示