Download

Skill UI

Browse and discover 6186+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Forensic Artifacts , found 16 results

Default Newest Most Downloaded

Autopsy Disk Forensic Analysis

analyzing-disk-image-with-autopsy

mukul975/Anthropic-Cybersecurity-Skills

Use Autopsy and Sleuth Kit to dissect disk images, recover deleted files, extract artifacts, run keyword searches, and build timelines so investigators deliver structured evidence and visual reports for cases.

Docker Container Forensics

analyzing-docker-container-forensics

mukul975/Anthropic-Cybersecurity-Skills

Guide to investigate compromised Docker containers by collecting container state, exporting filesystem layers, auditing volumes, logs, and host artifacts, and comparing images to detect malicious activity during incident response.

Volatility Memory Dump Analysis

analyzing-memory-dumps-with-volatility

mukul975/Anthropic-Cybersecurity-Skills

Guides forensic analysts through using Volatility 3 (and legacy Volatility 2) to inspect RAM dumps, identify injected/malicious processes, dump artifacts, scan with YARA, and extract credentials or network activity from compromised systems.

Outlook PST Forensic Analysis

analyzing-outlook-pst-for-email-forensics

mukul975/Anthropic-Cybersecurity-Skills

Extract forensic artifacts from Outlook PST/OST files with libpff, pst-utils, and Python tools, covering message content, headers, attachments, and deleted items to support incident response and legal investigations.

NTFS Artifact Recovery Toolkit

analyzing-slack-space-and-file-system-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Workflow for analyzing NTFS slack space, MFT entries, the USN change journal, and alternate data streams to recover hidden data and reconstruct file activity, using Sleuth Kit tools, MFTECmd, and Python parsing scripts in forensic investigations.

Supply Chain Malware Forensics

analyzing-supply-chain-malware-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Investigates supply chain malware artifacts by comparing trojanized binaries with legitimate builds, spotting injected code, verifying signatures, and tracing infection timelines to inform incident response and detection rule development.

Windows Amcache Artifact Analysis

analyzing-windows-amcache-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Parses Windows Amcache.hve using Eric Zimmerman’s AmcacheParser to surface program execution/install metadata, correlate SHA-1s with threat intelligence, and rebuild timelines for forensic triage.

Windows Registry Artifact Analysis

analyzing-windows-registry-for-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract and examine Windows Registry hives from forensic images to reveal installed software, autorun entries, USB history, and user activity, supporting incident response or insider threat investigations with RegRipper, python-registry, and hash validation workflows.

Windows Shellbag Forensics

analyzing-windows-shellbag-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Analyze Windows Shellbag registry artifacts with SBECmd and ShellBags Explorer to reconstruct folder browsing, removable-media, and network-share access during digital-forensic or threat-hunting investigations.

Timesketch Incident Timeline

building-incident-timeline-with-timesketch

mukul975/Anthropic-Cybersecurity-Skills

Use Timesketch to ingest logs and artifacts via Plaso, CSV, or JSONL, normalize multi-source events, build collaborative sketches, run analyzers, and explore timelines for forensic incident reconstruction and documentation.

Detecting Fileless Malware

detecting-fileless-malware-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects fileless malware in memory by analyzing PowerShell, WMI, registry-resident payloads, and LOLBin behaviors, guiding persistence, LOLBin abuse, and memory forensics investigations when no disk artifacts exist.

Browser Artifact Extraction

extracting-browser-history-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Automates extraction and analysis of Chrome, Firefox, and Edge history, downloads, cookies, bookmarks, and cache from forensic images to reconstruct user web activity and correlate it with other investigation timelines.

Language