Download

Skill UI

Browse and discover 7115+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Forensic Analysis , found 16 results

Default Newest Most Downloaded

Memory Forensics Toolkit

memory-forensics

sickn33/antigravity-awesome-skills

Memory Forensics Toolkit consolidates guidance for acquiring memory dumps, running Volatility analysis, and following incident response workflows to triage malware and forensic cases.

Autopsy Disk Forensic Analysis

analyzing-disk-image-with-autopsy

mukul975/Anthropic-Cybersecurity-Skills

Guide to analyzing forensic disk images with Autopsy and Sleuth Kit, covering installation, case preparation, ingest modules, file recovery, keyword hunting, and evidence tagging for structured investigations.

Malicious PDF Analysis

analyzing-malicious-pdf-with-peepdf

mukul975/Anthropic-Cybersecurity-Skills

Use peepdf alongside pdfid and pdf-parser to statically inspect suspicious PDFs, triage phishing attachments, extract embedded JavaScript, shellcode, or executables, and craft forensic/detection artifacts.

Outlook PST Forensic Analysis

analyzing-outlook-pst-for-email-forensics

mukul975/Anthropic-Cybersecurity-Skills

Extract Outlook PST/OST evidence via libpff, pst-utils, and forensic tooling to recover deleted items, headers, attachments, and metadata that help incident responders and legal teams document email-based investigations.

NTFS Slack Analysis

analyzing-slack-space-and-file-system-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Investigates NTFS slack space, MFT entries, USN journal, and ADS using TSK tools, MFTECmd, and Python scripts to recover hidden data and reconstruct deleted file actions during deep forensic investigations.

Windows Registry Artifact Analysis

analyzing-windows-registry-for-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Guides investigators through extracting Windows registry hives from forensic images and running RegRipper/python-registry to expose installed software, autoruns, persistence keys, and user activity, aiding incident response and threat hunting.

CloudTrail Log Analysis

implementing-cloud-trail-log-analysis

mukul975/Anthropic-Cybersecurity-Skills

Analyzes CloudTrail logs via Athena, CloudWatch Logs Insights, and SIEM feeds to monitor AWS security, detect threats, and support forensic investigations by identifying unauthorized access, privilege escalations, and anomalous API activity.

Arkime Network Traffic Analysis

implementing-network-traffic-analysis-with-arkime

mukul975/Anthropic-Cybersecurity-Skills

Deploy Arkime to capture full packets, query sessions via the v3 API, detect beaconing and TLS anomalies, inspect DNS/HTTP flows, and export PCAPs for forensic review.

Cloud Storage Forensic Acquisition

performing-cloud-storage-forensic-acquisition

mukul975/Anthropic-Cybersecurity-Skills

Automate forensic capture of Google Drive, OneDrive, Dropbox, and Box data by using service APIs alongside endpoint sync artifact analysis to gather admissible evidence for incident response and auditing exercises.

Disk Forensics Investigation

performing-disk-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs disk forensics investigations through imaging, filesystem analysis, artifact recovery, and timeline reconstruction to support incident response and legal evidence needs on compromised storage.

Forensic Log Analysis Workflow

performing-log-analysis-for-forensic-investigation

mukul975/Anthropic-Cybersecurity-Skills

Guides security analysts through collecting, parsing, and correlating Windows, Linux, and web logs so they can reconstruct incident timelines, identify suspicious activity, and document evidence during forensic investigations.

Network Packet Forensics

performing-network-packet-capture-analysis

mukul975/Anthropic-Cybersecurity-Skills

Use Wireshark, tshark, tcpdump, and Python tooling to inspect PCAP/PCAPNG data, reconstruct communications, surface malicious traffic, and support incident investigations with evidence of exfiltration or C2 activity.

Language