rocketcyber

Get a security posture summary for a RocketCyber customer account

Search RocketCyber security incidents by account, status, severity, verdict, and date range

Use this agent when an MSP needs to investigate and triage RocketCyber SOC alerts and security incidents across their client portfolio. Trigger for: SOC alert review, incident investigation, malicious incident, suspicious activity, security triage, threat correlation, incident escalation, RocketCyber incident queue, daily security review. Examples: "Review all open RocketCyber incidents and tell me what needs immediate attention", "Investigate incident 98765 and give me a remediation plan", "Which clients have the most open security incidents this week?"

Use this agent when an MSP needs to correlate RocketCyber SOC detections with broader security context from across the Kaseya ecosystem — cross-referencing incidents with Datto RMM device data, IT Glue documentation, and Autotask ticket history to build richer threat narratives and identify whether incidents are isolated or part of a broader pattern. Trigger for: threat correlation, cross-platform security analysis, incident context enrichment, RocketCyber pattern analysis, multi-source threat investigation, Kaseya security correlation, incident trend analysis, threat narrative. Examples: "Correlate this week's RocketCyber incidents with Autotask ticket history to see if there were warning signs", "Is the suspicious activity at Acme Corp isolated or are other clients showing the same pattern?", "Enrich this RocketCyber incident with device context from Datto RMM and documentation from IT Glue"

Use this skill when working with RocketCyber accounts - provider/customer hierarchy, account management, sub-account navigation, account settings, and security policy configuration. Covers account CRUD operations and multi-tenant MSP patterns.

Use this skill when working with RocketCyber agents (RocketAgent) - deployment, communication status, health monitoring, and troubleshooting. Covers agent installation, online/offline status, agent-to-account mapping, platform support, and connectivity diagnostics.

Use this skill when working with the RocketCyber API - authentication, Bearer token flow, base URL selection, pagination, rate limiting, error handling, and account hierarchy. Covers regional endpoints, query parameter patterns, and best practices for SOC API integration.

Use this skill when working with RocketCyber application inventory - detecting, categorizing, and monitoring applications across managed endpoints. Covers application discovery, approved vs unapproved applications, app-level threat detection, and software compliance reporting.

Use this skill when working with RocketCyber security incidents - searching, triaging, investigating, and resolving incidents. Covers incident lifecycle, severity levels, verdicts (Malicious/Suspicious/Benign), status transitions, SOC analyst triage patterns, and cross-vendor PSA ticket correlation.