Skill UI

Guides ransomware incident response from detection through containment, forensic analysis, recovery, and post-incident hardening while covering negotiation, validation of backups, and regulatory notification steps.

Performs forensic analysis on SQLite databases by reading headers, freelist chains, WAL files, and unallocated pages to recover deleted records and extract evidence from browsers, messaging apps, and mobile storage, aiding incident response and security audits.

Use Eric Zimmerman’s EZ Tools suite with KAPE orchestrating MFTECmd, PECmd, RECmd and related utilities to parse registries, MFT, prefetch, logs and jump lists for structured Windows forensic timelines.

Utilize advanced media intelligence to analyze audio, image, video, and text for synthetic manipulation and AI-generated content. This skill detects deepfakes, traces the original AI synthesis source, applies and detects watermarks, verifies speaker identity, and provides comprehensive media provenance analysis, ensuring media authenticity claims are rigorously supported.