Skill UI

Uses Foremost (with optional Scalpel follow-up) to carve files from raw disk images and unallocated space, customize signature configs, target specific formats, validate carved results, and assemble evidence during digital-forensics investigations.

Performs comprehensive investigations into insider threat incidents by pairing digital forensics, user behavior analytics, and HR/legal coordination to validate allegations, collect covert evidence, and support security actions when employees or trusted partners misuse privileged access.

Detect hidden payloads in images, audio, and video by combining metadata inspection, binwalk/zsteg/stegoveritas scans, steghide extraction attempts, and custom LSB analysis scripts to trace covert communication channels during digital forensics investigations.