Auto-classify security incidents with GPT-4 and Google Sheets for SOC teams

👤 Who it’s for Blue Team leads, SOC analysts, and IT responders looking to automatically classify security alerts using AI-driven logic and asset-based risk signals.

Ideal for teams already scoring threats via CyberScan or BlueOps Module 3, and needing to prioritize next steps across Monitor / Investigate / Isolate / Escalate playbooks.

⚙️ How it works / What it does Reads recent endpoint alerts from Google Sheets

Sends alert data (hostname, IP, risk score) to OpenAI GPT model

GPT returns structured JSON with:

severity tag (Low / Medium / High / Critical)

action recommendation (Monitor / Investigate / Isolate / Escalate)

Logs the full result to a centralized incident sheet