Consolidate DFIR findings into an executive and technical incident report.
npx skills add https://github.com/Fuzzdkk/dfir-skills --skill dfir-report
Please help me install this Agent Skill. Skill: dfir-report Source: https://github.com/Fuzzdkk/dfir-skills/tree/main/dfir-report Command: npx skills add https://github.com/Fuzzdkk/dfir-skills --skill dfir-report
DFIR practitioners often gather evidence from memory, disk, network, logs, malware analysis, and IOCs into separate reports. This skill consolidates all findings into a single, coherent incident report to save time and ensure consistency.
Run the tool to compile all available analysis reports into a single DFIR-INCIDENT-REPORT.
High-intent search queries and answers about installing and using this skill.
To consolidate DFIR findings, aggregate memory, disk, network, log, malware, IOC, and timeline analyses to cross-reference all data and generate a single incident report. This process merges separate evidence files into one coherent document.
Generating an executive summary and technical report requires cross-referencing findings from forensic analyses. The consolidated incident report formats evidence into an executive summary for stakeholders and detailed technical sections for technicians.
Incident reporting works directly with memory, disk, network, log, malware, and IOC analyses. It applies cross-referencing across all these forensic analysis sources to ensure comprehensive evidence consolidation in the final report.
You output a ready-to-distribute DFIR incident report by compiling all available forensic analyses. The tool automatically generates the final formatted document to the ./reports/DFIR-INCIDENT-REPORT.md file path for immediate distribution.
You cross-reference findings across separate forensic analyses to ensure consistency and save time. Consolidating memory, disk, network, log, and malware evidence into a single incident report prevents discrepancies found when evidence is scattered across separate files.
coreymayprayAutomate evidence collection, timeline reconstruction, and artifact analysis from memory, disk, log, and network data.
Liberty91LTDExport IOC collections to CSV, STIX 2.1, OpenIOC, and MISP bundles.
acaprinoAnalyze memory dumps with Volatility 3 to identify malware artifacts and credential leakage.
jassicsAutomate forensic triage by collecting disk, memory, and log evidence to build an incident timeline.
