A CLI tool that helps IT and security teams execute incident response runbooks interactively. Engineers select an incident type from a menu, and the workflow renders the matching runbook, guides them through each step, and generates a timestamped execution log. Designed to standardize incident response and ensure critical steps aren't missed during triage.

IT and security teams responding to incidents often work from runbooks stored as static documents, leading to skipped steps, inconsistent execution, and poor audit trails when alerts need immediate triage. This workflow transforms runbooks into an interactive CLI experience where engineers select an incident type from a menu, and Claude walks them through each step of the matching runbook from a local markdown library, ensuring nothing is missed. It automatically generates a timestamped execution log to disk for compliance and post-incident review.

The workflow standardizes incident response by turning static runbooks into guided, interactive sessions that prevent human error during high-pressure triage. Engineers execute runbooks consistently step-by-step, while timestamped logs create an automatic audit trail for compliance, post-mortems, and knowledge transfer. IT and security teams reduce mean time to resolution and ensure critical procedures are followed every time.