/resolve-escalation

Review and resolve a Huntress escalation

Boost this command

wyre-technology@wyre-technology

GitHub

From plugin

msp-claude-plugins

45200 skills146 agents200 commands4 MCP

Install

$ npx -y skills add wyre-technology/msp-claude-plugins --agent claude-code

How it fires

How this command gets triggered: by you, by Claude, or both.

Fires itselfClaude auto-loads it when your prompt matches the work.
You can call itInvoke it directly when you want it.
Slash command/resolve-escalation

Context preview

What this command does when you run it.

Review and resolve a Huntress escalation

Command definition

resolve-escalation.md

description: Review and resolve a Huntress escalation
argument-hint: "<escalation_id>"
arguments: [escalation_id]

Resolve Escalation

Review a Huntress SOC escalation in detail and resolve it after taking appropriate action. Includes escalation context, recommended actions, and related incidents.

Prerequisites

Huntress MCP server connected with valid API credentials
MCP tools `huntress_escalations_get`, `huntress_escalations_resolve`, and `huntress_incidents_get` available

Steps

1. **Get escalation details**

Call `huntress_escalations_get` with the specified `escalation_id`. Review the title, severity, summary, and recommended actions.

2. **Check related incidents**

If the escalation references related incidents, call `huntress_incidents_get` for each to understand the full threat context.

3. **Present findings**

Summarize the escalation, recommended actions, and any related incident details. Highlight urgency.

4. **Resolve escalation**

After the user confirms actions have been taken, call `huntress_escalations_resolve` to close the escalation.

Parameters

| Parameter | Type | Required | Description | |-----------|------|----------|-------------| | escalation_id | string | Yes | The escalation ID to review and resolve |

Examples

Review and Resolve an Escalation

/resolve-escalation --escalation_id "esc-321"

Error Handling

**Escalation Not Found:** Verify the escalation ID; use `huntress_escalations_list` to find open escalations
**Already Resolved:** The escalation may have been resolved by another team member
**Authentication Error:** Verify API credentials