claude

forensics-fundamentals

Use when you must investigate a disk image, memory dump, or compromised host under proper legal authority, on an authorized incident response engagement, lab, or CTF.

0 on GitHubby Muhammad Izaz Haiderv1.0.0MITupdated 16 days agoforensics
/

Plugin forensics-fundamentals from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.

What it installs

Skills (5)

  • forensics-fundamentals

    Use when you must investigate a disk image, memory dump, or compromised host under proper legal authority, on an authorized incident response engagement, lab, or CTF. Covers chain of custody and write-blocked acquisition with dc3dd, hashing and verification with sha256sum, file system analysis with

  • artifact-parsing

    Use when extracting meaning from specific forensic artifacts: browser history, registry hives, event logs, and application data. Covers locating artifacts on disk images, parsing them with standard tools, and correlating artifact contents. Use when the timeline needs detail, when investigating user

  • evidence-handling

    Use when acquiring and preserving digital evidence for

  • forensics-evidence-reporting

    Use when turning forensic findings into a written report that

  • timeline-basics

    Use when building a forensic timeline of events from a disk

View source on GitHub

More from mizazhaider-ceh/AgentArsenal

All 353 plugins →

web-sqli

claude

Use when testing a web application for SQL injection on an authorized engagement.

7 skills

0

Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.

6 skills

0

Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.

6 skills

0

web-xss

claude

Use when testing a web application for cross-site scripting on an authorized engagement.

6 skills

0

Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.

5 skills

0

Use when testing REST, GraphQL, or internal APIs on an authorized engagement.

5 skills

0

Similar plugins

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.

200 skills

mukul975/Anthropic-Cybersecurity-Skills 36,021

45 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator, API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor, skill tester, performance profiler, focused-fix, browser-automation, full-page-screenshot, git-worktree-manager, monorepo-navigator, codebase-onboarding, interview-system-designer, runbook-generator, spec-driven-workflow, secrets-vault-manager, env-secrets-manager, pr-review-expert, self-eval, tc-tracker, feature-flags-architect, kubernetes-operator, chaos-engineering, ship-gate, slo-architect (error-budget + multi-window burn-rate alerts per Google SRE Workbook), tech-debt-tracker, agent-regression-evals, coding-agent-rollout, commit-craft, agent-run-forensics and i18n-localization. Agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw.

48 skills · hooks

alirezarezvani/claude-skills 29,725

kubeshark

claude

Network observability skills powered by Kubeshark MCP — root cause analysis, KFL traffic filtering, snapshot forensics, PCAP extraction.

4 skills · 1 MCP server

kubeshark/kubeshark 12,137

rea-video

claude

逆向拆解视频:逐镜头判断制作方式,拆剪辑包装、声音和真实素材,给出复刻方案。

1 skill

JuneYaooo/rea-video 7,642

5 live-detection Databricks skills — cost-leak-hunter, cluster-forensics, uc-migration-pilot, streaming-guardian, bundle-medic — backed by the databricks-workspace-mcp server (npm). The v2 rebuild: real workspace detection over static docs.

5 skills · 1 MCP server · hooks

jeremylongshore/tons-of-skills-marketplace 2,917

The adversarial bundle — skills that attack your work before reality does: Premortem Assassin, Devil's Twin, Metric Gaslighting Detector, Decision Autopsy, Assumption Bounty.

5 skills

mohitagw15856/pm-claude-skills 1,544

Maintain forensics-fundamentals?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins353 plugins