Download

Skill UI

Browse and discover 6218+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Forensics , found 27 results

Default Newest Most Downloaded

Forensics Data Collector

forensics-data-collector

jeremylongshore/claude-code-plugins-plus-skills

Auto-activating skill that guides analysts through forensics data collector operations, aligning advanced security practices with compliance frameworks while generating validated code and configurations for enterprise deployments.

Memory Forensics Toolkit

memory-forensics

sickn33/antigravity-awesome-skills

Memory Forensics Toolkit consolidates guidance for acquiring memory dumps, running Volatility analysis, and following incident response workflows to triage malware and forensic cases.

Disk Imaging Forensics

acquiring-disk-image-with-dd-and-dcfldd

mukul975/Anthropic-Cybersecurity-Skills

Steps to create forensic bit-for-bit copies with dd or dcfldd, including write-blocking, hash logging, and verification for incident response and legal evidence acquisition.

Docker Container Forensics

analyzing-docker-container-forensics

mukul975/Anthropic-Cybersecurity-Skills

Guide to investigate compromised Docker containers by collecting container state, exporting filesystem layers, auditing volumes, logs, and host artifacts, and comparing images to detect malicious activity during incident response.

Memory Forensics Analysis Workflow

analyzing-memory-forensics-with-lime-and-volatility

mukul975/Anthropic-Cybersecurity-Skills

Guide to acquire Linux memory with LiME and analyze it using Volatility 3 to pull process lists, bash history, network sockets, modules, and injected code during incident response.

Outlook PST Forensic Analysis

analyzing-outlook-pst-for-email-forensics

mukul975/Anthropic-Cybersecurity-Skills

Extract forensic artifacts from Outlook PST/OST files with libpff, pst-utils, and Python tools, covering message content, headers, attachments, and deleted items to support incident response and legal investigations.

Supply Chain Malware Forensics

analyzing-supply-chain-malware-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Investigates supply chain malware artifacts by comparing trojanized binaries with legitimate builds, spotting injected code, verifying signatures, and tracing infection timelines to inform incident response and detection rule development.

Windows Shellbag Forensics

analyzing-windows-shellbag-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Analyze Windows Shellbag registry artifacts with SBECmd and ShellBags Explorer to reconstruct folder browsing, removable-media, and network-share access during digital-forensic or threat-hunting investigations.

Volatility Memory Forensics

conducting-memory-forensics-with-volatility

mukul975/Anthropic-Cybersecurity-Skills

Guides incident responders through Volatility 3 workflows for acquiring RAM dumps, analyzing processes, spotting injections or network connections, and extracting credentials or other volatile artifacts during malware investigations.

Detecting Fileless Malware

detecting-fileless-malware-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects fileless malware in memory by analyzing PowerShell, WMI, registry-resident payloads, and LOLBin behaviors, guiding persistence, LOLBin abuse, and memory forensics investigations when no disk artifacts exist.

Process Injection Detection

detecting-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects malicious process injection techniques through memory forensics, Sysmon/API monitoring, and behavioral signals, aiding EDR/SIEM teams in spotting DLL injection, hollowing, APC/thread hijacking, reflective loading, and similar stealthy attacks.

Rootkit Activity Detection

detecting-rootkit-activity

mukul975/Anthropic-Cybersecurity-Skills

Detects stealthy rootkit behavior on compromised hosts by using memory forensics, cross-view process comparisons, kernel hook scanning, module validation, and hidden artifact discovery to confirm kernel-level compromise before remediation.

Language