evidence-acquisition

Community

Preserve digital evidence with forensic integrity.

AuthorFuzzdkk
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Acquire and preserve digital evidence following forensic best practices. Maintain chain of custody, verify integrity with hashes, and document every step.

Core Features & Use Cases

  • Disk Imaging (Raw/dd) and evidence preservation for forensic imaging workflows.
  • Memory capture and volatile data collection for live investigations.
  • Live triage and log collection to support rapid situational awareness.
  • Chain-of-custody documentation and hash verification to ensure admissibility.

Quick Start

Identify the target device and run the acquisition workflow to image disks, capture memory, and collect logs with integrity verification.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: evidence-acquisition
Download link: https://github.com/Fuzzdkk/dfir-skills/archive/main.zip#evidence-acquisition

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 510,000+ vetted skills library on demand.