claude

disk-forensics

Use when examining a disk image or forensic copy of a drive during an investigation.

0 on GitHubby Muhammad Izaz Haiderv1.0.0MITupdated 16 days agoforensics
/

Plugin disk-forensics from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.

What it installs

Skills (4)

  • disk-forensics

    Use when examining a disk image or forensic copy of a drive during an investigation. Covers The Sleuth Kit and Autopsy workflows: partition layout, file carving, deleted file recovery, timeline generation, hash analysis, and keyword search. Use when you need to recover deleted files, prove what exis

  • deleted-file-carving

    Use when recovering deleted files from unallocated space on a

  • filesystem-timeline

    Use when building a detailed filesystem timeline from a disk

  • partition-recovery

    Use when partition tables are damaged, deleted, or missing on

View source on GitHub

More from mizazhaider-ceh/AgentArsenal

All 353 plugins →

web-sqli

claude

Use when testing a web application for SQL injection on an authorized engagement.

7 skills

0

Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.

6 skills

0

Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.

6 skills

0

web-xss

claude

Use when testing a web application for cross-site scripting on an authorized engagement.

6 skills

0

Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.

5 skills

0

Use when testing REST, GraphQL, or internal APIs on an authorized engagement.

5 skills

0

Similar plugins

deja-vu

claude

Local session memory for coding agents: indexes existing session transcripts on disk across 43 coding agents into a local BM25 store with MCP recall, hooks, skill, and /deja command

2 skills · 1 command · 1 MCP server · hooks

wshobson/agents 42,461

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.

200 skills

mukul975/Anthropic-Cybersecurity-Skills 36,021

45 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator, API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor, skill tester, performance profiler, focused-fix, browser-automation, full-page-screenshot, git-worktree-manager, monorepo-navigator, codebase-onboarding, interview-system-designer, runbook-generator, spec-driven-workflow, secrets-vault-manager, env-secrets-manager, pr-review-expert, self-eval, tc-tracker, feature-flags-architect, kubernetes-operator, chaos-engineering, ship-gate, slo-architect (error-budget + multi-window burn-rate alerts per Google SRE Workbook), tech-debt-tracker, agent-regression-evals, coding-agent-rollout, commit-craft, agent-run-forensics and i18n-localization. Agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw.

48 skills · hooks

alirezarezvani/claude-skills 29,725

kubeshark

claude

Network observability skills powered by Kubeshark MCP — root cause analysis, KFL traffic filtering, snapshot forensics, PCAP extraction.

4 skills · 1 MCP server

kubeshark/kubeshark 12,137

deja-vu

claude

deja-vu memory for Claude Code: your own past sessions, from every coding agent on the machine, recalled before you ask. Indexes the session files 44 agents (Claude Code, Codex, Cursor, opencode and more) already wrote to disk into a local BM25 index, and adds an MCP server, a /deja command, a skill and hooks that recall at session start, on each prompt and before edits or commands. No LLM, no embeddings, no network. Needs the deja binary (brew, npm, scoop or winget).

2 skills · 1 command · 1 MCP server · hooks

davepoon/buildwithclaude 3,741

5 live-detection Databricks skills — cost-leak-hunter, cluster-forensics, uc-migration-pilot, streaming-guardian, bundle-medic — backed by the databricks-workspace-mcp server (npm). The v2 rebuild: real workspace detection over static docs.

5 skills · 1 MCP server · hooks

jeremylongshore/tons-of-skills-marketplace 2,917

Maintain disk-forensics?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins353 plugins