Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Forensic Analysis , found 14 results

Default Newest Most Downloaded

Memory Forensics Toolkit

memory-forensics

sickn33/antigravity-awesome-skills

Memory Forensics Toolkit consolidates guidance for acquiring memory dumps, running Volatility analysis, and following incident response workflows to triage malware and forensic cases.

Bootkit Rootkit Analysis

analyzing-bootkit-and-rootkit-samples

mukul975/Anthropic-Cybersecurity-Skills

Walks analysts through acquiring MBR/VBR/UEFI firmware dumps, disassembling boot sectors, auditing firmware modules, and running kernel memory forensics to detect bootkits and rootkits persisting below the OS.

Autopsy Disk Image Analysis

analyzing-disk-image-with-autopsy

mukul975/Anthropic-Cybersecurity-Skills

Guide to using Autopsy for comprehensive disk image forensics—recover files, inspect artifacts, configure ingest modules, run keyword searches, and document evidence for investigations with both GUI and Sleuth Kit CLI commands.

Email Header Phishing Analysis

analyzing-email-headers-for-phishing-investigation

mukul975/Anthropic-Cybersecurity-Skills

Parse and validate email headers when investigating phishing incidents to trace delivery hops, confirm sender authenticity, and detect spoofing via SPF, DKIM, and DMARC checks during forensic response.

Prefetch Execution Analysis Guide

analyzing-prefetch-files-for-execution-history

mukul975/Anthropic-Cybersecurity-Skills

Guide for parsing Windows Prefetch files to reconstruct program execution history, run counts, timestamps, and referenced assets for forensic investigations and incident timelines.

USB Device History Analysis

analyzing-usb-device-connection-history

mukul975/Anthropic-Cybersecurity-Skills

Collects Windows registry hives, SetupAPI logs, and relevant event logs to extract USB storage records, drive-letter assignments, and user mount history for forensic timelines and potential data exfiltration investigations.

Windows Shellbag Analysis

analyzing-windows-shellbag-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Guide for analyzing Windows Shellbag registry artifacts with SBECmd and ShellBags Explorer to reconstruct folder browsing activity, validate access to removable media/network shares, and support forensic investigations even after data deletion.

Cloud Forensics Investigation

performing-cloud-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Guides investigators through AWS/Azure/GCP forensic workflows, covering evidence preservation, log collection, IAM analysis, and incident response to trace breaches in cloud environments.

Cloud Storage Forensic Acquisition

performing-cloud-storage-forensic-acquisition

mukul975/Anthropic-Cybersecurity-Skills

Perform forensic acquisition and analysis of cloud services such as Google Drive, OneDrive, Dropbox, and Box by combining API-based remote pulls with endpoint sync client artifacts to support investigations, incident response, and security assessments.

Endpoint Forensics Investigation

performing-endpoint-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs endpoint-focused digital forensics including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction so teams can investigate compromises, gather court-ready evidence, and understand incident scope.

Network Packet Forensics

performing-network-packet-capture-analysis

mukul975/Anthropic-Cybersecurity-Skills

Perform forensic analysis of PCAP/PCAPNG captures with Wireshark, tshark, tcpdump, and Python tooling to rebuild sessions, extract transferred files, spot malicious traffic, and validate exfiltration or command-and-control evidence.

SQLite Forensics Toolkit

performing-sqlite-database-forensics

mukul975/Anthropic-Cybersecurity-Skills

Perform forensic analysis on SQLite databases to recover deleted records from freelists and WAL logs, decode timestamps, and extract browser, messaging, and mobile evidence.

Language