Skill UI

This comprehensive guide provides techniques for acquiring, analyzing, and extracting artifacts from memory dumps. It covers best practices for digital forensics, crucial for incident response and malware analysis. Users learn how to use industry-standard tools like Volatility 3 on Windows, Linux, and macOS, including process, network, and registry deep dives.

This skill details a comprehensive workflow for performing Linux memory forensics. It involves acquiring the volatile memory using the LiME kernel module, and subsequently analyzing the resulting image with Volatility 3. Key analyses cover critical artifacts such as process listings, network connections, loaded kernel modules, and bash history, making it an essential technique for incident response, digital forensics, and threat hunting on compromised Linux systems.

Performs endpoint digital forensics by capturing memory and disk images, analyzing artifacts, and rebuilding timelines to support incident investigations and legal evidence collection.

A comprehensive, structured framework for conducting sophisticated Open Source Intelligence (OSINT) and cryptocurrency forensic investigations. This guide covers operational security (OpSec), target profiling, advanced transaction tracing across multiple blockchain layers (L1/L2), wallet analysis, and identifying linked digital assets. Use this methodology to guide systematic, multi-dimensional intelligence collection campaigns.