Skill UI

Generates and implements backup strategies for databases and applications, producing configuration files and automation scripts that ensure secure, scalable protection and disaster recovery readiness across platforms.

Analyze NTFS $MFT records, $LogFile, $UsnJrnl, and slack space with MFTECmd, analyzeMFT, and X-Ways to recover metadata and content of deleted files during incident response and threat hunting.

Analyzes ransomware encryption algorithms, key management, and file routines to assess decryption feasibility, highlight weaknesses, and guide forensic recovery or decryptor development for known ransomware families.

Provides a step-by-step disk forensics workflow for evidence handling, imaging, file-system analysis, timeline reconstruction, and artifact recovery using FTK Imager, Autopsy, and The Sleuth Kit to support incident responders.

Use PhotoRec to carve deleted documents, images, videos, and database files from forensic disk images or damaged storage media when metadata is missing; the workflow covers installation, interactive scans, command-mode targeting, cataloging, and validation for evidence-focused investigations.