Skill UI

Use Volatility, Mimikatz, and pypykatz to recover cached credentials, hashes, and Kerberos tickets from Windows memory dumps for incident response, breach scope analysis, and forensic investigations.

Performs firmware image extraction and analysis with binwalk to detect embedded filesystems, archives, bootloaders, kernels, and sensitive credentials, guiding entropy scans, recursive unpacking, filesystem mounts, and string hunts for embedded device security assessments.