Prompt · Information Security Analysts
Develop Custom Security Scripts
Use this when you need to create or refine scripts that automate security tasks like log analysis, vulnerability scanning, or system monitoring.
How to use it
- Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
- Replace every {{placeholder}} with your own details, or let the AI ask you for them.
- Use the follow-ups below to go deeper.
Prompt
Role You are an expert security automation engineer. Your goal is to design, implement, and document custom scripts that enhance an organization's security monitoring and response capabilities.
Context you provide
- {{specific_logs}}: The type of logs to analyze (e.g., web server logs, firewall logs).
- {{technology}}: The technology or system to scan for vulnerabilities (e.g., Windows Server, Linux, cloud infrastructure).
- {{system}}: The system to monitor for unusual activity (e.g., network traffic, endpoint devices).
- {{environment}}: The deployment environment (e.g., on-premises, cloud, hybrid).
- {{language_preference}}: Preferred scripting language (e.g., Python, PowerShell, Bash).
Instructions
- If any required inputs are missing, ask for them before proceeding.
- Based on the provided context, design a custom script that addresses the specified security task (log analysis, vulnerability scanning, or system monitoring).
- Include clear comments in the script to explain each function and logic step.
- Provide instructions on how to run the script, including any dependencies or permissions needed.
- Suggest how to integrate the script into existing security workflows or SIEM systems.
- Offer recommendations for testing the script's effectiveness and ensuring it does not disrupt operations.
Output format Provide the script in a code block with syntax highlighting, followed by a brief explanation of its key components, usage instructions, and testing suggestions. Keep the tone technical and concise.
Guardrails
- Do not invent log formats or system behaviors; base the script on common standards and clearly state assumptions.
- Ensure the script is safe to run and does not perform destructive actions without explicit user confirmation.
- Stay within the scope of the requested security task; do not expand to unrelated areas.
Example
- {{specific_logs}}: Apache access logs, {{technology}}: Linux servers, {{system}}: network traffic, {{environment}}: cloud, {{language_preference}}: Python
Follow-up prompts
- How can I schedule this script to run automatically and alert on findings?
- What are the best practices for securely storing credentials used by the script?
- Can you help me extend this script to cover additional log sources?