Download

Skill UI

Browse and discover 7093+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Forensic Artifacts , found 13 results

Default Newest Most Downloaded

Docker Container Forensics

analyzing-docker-container-forensics

mukul975/Anthropic-Cybersecurity-Skills

Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and gather evidence during incident response.

Analyzing LNK Jump Lists

analyzing-lnk-file-and-jump-list-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through interpreting Windows LNK shortcuts and Jump List artifacts using LECmd, JLECmd, and Python parsing to surface file access, program execution, and user activity evidence during forensic investigations.

Malicious PDF Analysis

analyzing-malicious-pdf-with-peepdf

mukul975/Anthropic-Cybersecurity-Skills

Use peepdf alongside pdfid and pdf-parser to statically inspect suspicious PDFs, triage phishing attachments, extract embedded JavaScript, shellcode, or executables, and craft forensic/detection artifacts.

Prefetch Execution History

analyzing-prefetch-files-for-execution-history

mukul975/Anthropic-Cybersecurity-Skills

Parses Windows Prefetch artifacts via PECmd or Python to reveal program run counts, timestamps, referenced files, and volume data for forensic timelines and malware investigations.

NTFS Slack Analysis

analyzing-slack-space-and-file-system-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Investigates NTFS slack space, MFT entries, USN journal, and ADS using TSK tools, MFTECmd, and Python scripts to recover hidden data and reconstruct deleted file actions during deep forensic investigations.

Windows Registry Artifact Analysis

analyzing-windows-registry-for-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Guides investigators through extracting Windows registry hives from forensic images and running RegRipper/python-registry to expose installed software, autoruns, persistence keys, and user activity, aiding incident response and threat hunting.

Volatility Memory Forensics

conducting-memory-forensics-with-volatility

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through Volatility 3 memory forensics to extract malware execution, process injection, network connections, and credential theft artifacts from RAM dumps during incident response.

Velociraptor Incident Response Collection

implementing-velociraptor-for-ir-collection

mukul975/Anthropic-Cybersecurity-Skills

Guide for deploying Velociraptor to scale forensic artifact collection across Windows, Linux, and macOS, including server/client setup, Docker options, and VQL artifacts used during incident response hunts and compliance-driven monitoring.

Endpoint Forensics Investigation

performing-endpoint-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs endpoint digital forensics by capturing memory and disk images, analyzing artifacts, and rebuilding timelines to support incident investigations and legal evidence collection.

Volatility3 Memory Forensics

performing-memory-forensics-with-volatility3

mukul975/Anthropic-Cybersecurity-Skills

Guide to using Volatility 3 on volatile memory dumps to enumerate processes, network activity, modules, and extracted artifacts for malware and incident response.

Volatility3 Memory Forensics

performing-memory-forensics-with-volatility3-plugins

mukul975/Anthropic-Cybersecurity-Skills

Automates Volatility3 plugin runs to inspect Windows, Linux, and macOS memory dumps for injected code, hidden processes, DLLs, and network activity, helping incident responders and red teams uncover rootkits, credential theft, and malware artifacts.

Network Forensics with Wireshark

performing-network-forensics-with-wireshark

mukul975/Anthropic-Cybersecurity-Skills

Capture and analyze PCAP traffic with Wireshark/tshark to reconstruct suspicious sessions, extract artifacts, and detect malicious communications during incident response and malware investigations.

Language