Download

Skill UI

Browse and discover 15558+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Digital Forensics , found 31 results

Default Newest Most Downloaded

Memory Forensics Analysis Techniques

memory-forensics

sickn33/antigravity-awesome-skills

This comprehensive guide provides techniques for acquiring, analyzing, and extracting artifacts from memory dumps. It covers best practices for digital forensics, crucial for incident response and malware analysis. Users learn how to use industry-standard tools like Volatility 3 on Windows, Linux, and macOS, including process, network, and registry deep dives.

Analyzing Browser Forensics with Hindsight

analyzing-browser-forensics-with-hindsight

mukul975/Anthropic-Cybersecurity-Skills

Hindsight is an open-source digital forensics tool designed to parse and correlate artifacts from Chromium-based browsers (Chrome, Edge, Brave, Opera). It extracts comprehensive data, including browsing history, cookies, download records, autofill data, and saved passwords, generating unified, chronological timelines essential for incident response, insider threat investigation, and digital forensics cases.

Analyzing Docker Container Forensics

analyzing-docker-container-forensics

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide and workflow for investigating compromised Docker containers. This tool assists digital forensic experts in analyzing layers, volumes, logs, runtime artifacts, and host configurations to identify malicious activity, privilege escalation attempts, and system breaches during incident response.

Analyzing Email Headers for Phishing Forensics

analyzing-email-headers-for-phishing-investigation

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide and workflow for digital forensics investigators to analyze raw email headers. This tool helps trace the true origin of suspicious emails, verify sender authenticity, and detect advanced spoofing techniques by validating crucial protocols like SPF, DKIM, and DMARC. It covers everything from header parsing to domain infrastructure analysis and IP reputation checks.

Detecting Heap Spray Attacks with Volatility3

analyzing-heap-spray-exploitation

mukul975/Anthropic-Cybersecurity-Skills

This skill provides a comprehensive guide to detecting and analyzing heap spray exploitation techniques from raw memory dumps. Utilizing Volatility3's advanced plugins (such as malfind and vadinfo), users can identify key forensic artifacts like NOP sled patterns, suspicious executable memory regions, and embedded shellcode. It is essential for malware analysts and digital forensics investigators conducting incident response.

Analyzing MFT for Deleted File Recovery

analyzing-mft-for-deleted-file-recovery

mukul975/Anthropic-Cybersecurity-Skills

This guide details advanced digital forensics techniques for recovering deleted file metadata and content from NTFS volumes. It focuses on analyzing the Master File Table (MFT), USN Journals, and $LogFile transaction records. Techniques include parsing MFT slack space and utilizing specialized tools like MFTECmd to reconstruct file system timelines and identify deleted evidence remnants.

Analyzing NTFS Artifacts and Slack Space

analyzing-slack-space-and-file-system-artifacts

mukul975/Anthropic-Cybersecurity-Skills

This guide provides a comprehensive workflow for deep digital forensics examination of NTFS volumes. It covers recovering hidden data from file system slack space, analyzing MFT entries for deleted metadata, reconstructing file actions using the USN Journal, and detecting hidden content via Alternate Data Streams (ADS). Essential for incident response and evidence recovery.

Analyzing USB Device Connection History

analyzing-usb-device-connection-history

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive digital forensics technique used to investigate removable media usage. It parses artifacts from Windows registry (USBSTOR, MountedDevices), Event Logs, and SetupAPI logs to track which USB devices were connected, when they were used, and establishing a timeline for potential data exfiltration or insider threat activity.

Analyzing Windows Amcache Forensic Artifacts

analyzing-windows-amcache-artifacts

mukul975/Anthropic-Cybersecurity-Skills

A specialized tool for digital forensics investigators that parses the Windows Amcache.hve registry hive. It extracts crucial evidence regarding program execution history, application installation metadata, and loaded driver binaries. By correlating SHA-1 hashes and reconstructing timelines, users can determine which executables ran on a system, aiding in incident response and threat detection.

Analyzing Windows Registry for Digital Forensics

analyzing-windows-registry-for-artifacts

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive forensic workflow guides investigators through the extraction and detailed analysis of Windows Registry hives (SAM, SYSTEM, SOFTWARE, etc.). It is used during incident response to uncover critical artifacts, including user activity history, malware persistence mechanisms (autorun keys), installed software records, and evidence of system compromise.

Analyzing Windows Shellbag Registry Artifacts

analyzing-windows-shellbag-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Shellbags are critical Windows registry artifacts that record user interaction history with directories, storing view settings and browsing paths. This toolset allows analysts to reconstruct folder access history, detect connections to removable media, and prove navigation to network shares, even if the original folders no longer exist on the system. Essential for digital forensics and incident response.

Extracting Browser History and Forensic Artifacts

extracting-browser-history-artifacts

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide and method for extracting and analyzing digital forensic artifacts from major web browsers, including Chrome, Firefox, and Edge. This process retrieves critical data such as web history, cookies, cached items, downloads, and bookmarks to reconstruct user web activity trails for deep cybersecurity and digital forensics investigations.

Language