Matthew Green
Community@mgreen27 · Sydney
DFIR / Detection guy
Agent Skills by Matthew Green
Showing 12 vetted skills indexed across 1 GitHub repositories.
mgreen27ioc-tracker
Correlate indicators of compromise across multiple hosts from CSV data.
mgreen27windows-registry-analysis
Retrieve Windows registry information from disk images via Velociraptor.
mgreen27investigation-query
Query investigation wiki pages and spreadsheets for case status and findings.
mgreen27investigation
Create structured investigation case folders with documentation and CSV templates.
mgreen27windows-analysis
Collect and analyze Windows artifacts using Velociraptor for incident response.
mgreen27investigation-ingest
Integrate raw forensic outputs into investigation documentation and update reports and spreadsheet links.
mgreen27windows-execution-analysis
Collect and analyze Windows process execution artifacts with Velociraptor.
mgreen27memory-analysis
Execute Volatility 3 plugins to analyze Windows memory images for malicious processes.
mgreen27virustotal
Retrieve VirusTotal reports and relationships for hashes, URLs, IPs, and domains.
mgreen27detect-dfir-collection-type
Classify forensic evidence files by file signatures and directory keywords.
mgreen27add-velociraptor-mapped-client
Attach offline evidence disks or directories to Velociraptor GUI environments.
mgreen27prep-dfir-tools
Deploy and configure Velociraptor, Volatility 3, and Sleuth Kit on macOS or Linux.