blumira

List all devices and agents across the organization with status and health information

Triage open Blumira findings by severity, presenting a prioritized list for review

Deep investigation of a specific Blumira finding with details, context, and comment history

MSP dashboard showing all managed accounts with open finding counts and severity breakdown

Resolve a Blumira finding with the appropriate resolution type and notes

Use this agent when generating compliance-oriented security reports from Blumira SIEM data — not for live incident investigation, but for producing evidence packages, coverage gap assessments, and log source health summaries for frameworks like SOC 2, HIPAA, and CIS. Trigger for: Blumira compliance report, SOC 2 evidence, HIPAA security report, CIS controls Blumira, SIEM compliance, detection coverage report, log source health, Blumira audit report, compliance evidence Blumira, security posture report Blumira, framework evidence, Blumira QBR. Examples: "Generate a SOC 2 compliance evidence report from Blumira for Acme Corp", "Show me the detection coverage gaps for our HIPAA client", "Produce a log source health summary for the quarterly review", "What Blumira findings map to CIS Controls for this client?"

Use this agent when investigating Blumira SIEM alerts and findings, tracing attack chains across data sources, resolving detections, auditing security posture across MSP client accounts, or producing threat investigation reports. Trigger for: Blumira finding, Blumira alert, SIEM investigation, Blumira detection, triage Blumira, resolve finding Blumira, Blumira MSP, cross-account findings, attack chain analysis, Blumira security posture. Examples: "Show me all critical and high Blumira findings open right now", "Investigate this Blumira finding and tell me what happened", "Resolve this finding as a false positive with notes", "Give me a security posture overview across all our Blumira clients"

Use this skill when working with Blumira agents, devices, and agent keys, including listing devices, checking agent health, and managing agent deployment keys.

Use this skill when working with Blumira API authentication, understanding the dual path structure (org vs MSP), constructing filtered queries, handling pagination, or troubleshooting API errors.

Use this skill when working with Blumira findings (security alerts/detections), including listing, filtering, investigating, resolving, assigning, and commenting on findings.

Use this skill when working with Blumira MSP (Managed Service Provider) multi-tenant operations, including managing multiple client accounts, cross-account finding queries, and per-account device/user management.

Use this skill when resolving Blumira findings, choosing the correct resolution type, or understanding resolution workflows and their impact on security metrics.