Incident Type Generator

Generate an incident-type.md file for your S.I.R.T. Claude Project. Upload it alongside your org-sec-stack.md to generate IR checklists without an API key.

01 — Incident Category *

03 — Asset Type *

04 — Severity Tag (optional)

For output tagging only — all incidents are treated as active priority.

05 — Detection Time (optional)

Used as time-filter anchor in tool query steps.

06 — MITRE ATT&CK Tags (auto-populated — edit if needed)

Select a sub-type to auto-populate tags

07 — Analyst Notes (optional)

0/500

Category, sub-type, and asset type are required.

Live Previewincident-type.md

---
# incident-type.md
# S.I.R.T. Incident Session File — generated by sirt-five.vercel.app
# Version: v1.1
---

incident_type: "—"
sub_type: "—"
sub_type_id: "—"
asset_type: "—"
severity_tag: ""
detection_time: ""
mitre_primary:
  - (auto-populated on sub-type select)

Using the Skill Bundle?

Upload your org-sec-stack.md and incident-type.md to your Claude Project, then type Generate my IR checklist.