Download

Skill UI

Browse and discover 6044+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Forensics , found 25 results

Default Newest Most Downloaded

Cloud Native Falco Forensics

performing-cloud-native-forensics-with-falco

mukul975/Anthropic-Cybersecurity-Skills

Deploy Falco YAML rules to monitor containers and Kubernetes for runtime threats, parse alerts, and investigate compromises by catching shell spawns, file tampering, net anomalies, or privilege escalations.

Disk Forensics Investigation

performing-disk-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs full disk forensic imaging and analysis using FTK Imager, Autopsy, Sleuth Kit, and related utilities to recover deleted data, verify evidence integrity, and rebuild user or adversary timelines for incident response and legal investigations.

Endpoint Forensics Investigation

performing-endpoint-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Guides the capture and analysis of volatile and persistent data on compromised endpoints, covering memory acquisition, disk imaging, artifact parsing, and timeline reconstruction for incident response and legal evidence.

Foremost File Carving Guide

performing-file-carving-with-foremost

mukul975/Anthropic-Cybersecurity-Skills

Uses Foremost (with optional Scalpel follow-up) to carve files from raw disk images and unallocated space, customize signature configs, target specific formats, validate carved results, and assemble evidence during digital-forensics investigations.

Insider Threat Investigation

performing-insider-threat-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs comprehensive investigations into insider threat incidents by pairing digital forensics, user behavior analytics, and HR/legal coordination to validate allegations, collect covert evidence, and support security actions when employees or trusted partners misuse privileged access.

Linux Log Forensics

performing-linux-log-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs forensic investigation on Linux logs (auth.log, syslog, kern.log, journalctl, auditd, cron, package logs) to reconstruct user activity, detect unauthorized access, and timeline intrusions with scripts and shell commands.

Memory Forensics with Volatility

performing-memory-forensics-with-volatility3

mukul975/Anthropic-Cybersecurity-Skills

Use Volatility 3 to inspect RAM dumps, list processes, network links, registry data, and credentials so investigators can spot hidden malware or injected code during incident response.

Volatility3 Memory Forensics

performing-memory-forensics-with-volatility3-plugins

mukul975/Anthropic-Cybersecurity-Skills

Automates Volatility3 plugin runs against Windows, Linux, and macOS memory dumps to flag injected code, hidden processes, DLL lists, active network connections, and YARA hits, forming a repeatable workflow for malware and incident-response analysts.

Cellebrite Mobile Forensics

performing-mobile-device-forensics-with-cellebrite

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step guide for acquiring and analyzing mobile device data with Cellebrite UFED combined with ALEAPP/iLEAPP, covering evidence collection from messages, locations, and app artifacts during security or corporate investigations.

Wireshark Network Forensics

performing-network-forensics-with-wireshark

mukul975/Anthropic-Cybersecurity-Skills

Capture, inspect, and reconstruct network events with Wireshark/tshark to surface C2, exfiltration, and malicious artifacts from large PCAPs, and export files or sessions for deeper incident response.

Network Packet Forensics

performing-network-packet-capture-analysis

mukul975/Anthropic-Cybersecurity-Skills

Use Wireshark, tshark, tcpdump and Python to analyze PCAP/PCAPNG files for forensic cases, rebuild conversations, recover transferred files, highlight suspicious traffic, and document data exfiltration or command-and-control indicators.

SQLite Database Forensics

performing-sqlite-database-forensics

mukul975/Anthropic-Cybersecurity-Skills

Analyze SQLite internals to recover deleted records, traverse freelist and WAL structures, and extract browser, messaging, and mobile app artifacts for incident responders handling client-side evidence.

Language