Automate forensic threat analysis with file triage, IOC extraction, and OSINT pivoting.
npx skills add https://github.com/zidanem17-lgtm/Forenstix-2.0 --skill forenstix-2-0
Please help me install this Agent Skill. Skill: forenstix-2.0 Source: https://github.com/zidanem17-lgtm/Forenstix-2.0/tree/main Command: npx skills add https://github.com/zidanem17-lgtm/Forenstix-2.0 --skill forenstix-2-0
Facilitates comprehensive forensic investigation by combining file triage, IOC extraction, and targeted OSINT pivoting to streamline threat analysis workflows.
Upload a suspicious file to analyze its properties, then select an IOC to investigate further with automated pivot tools.
High-intent search queries and answers about installing and using this skill.
Automate forensic threat analysis by uploading suspicious files to extract hashes, run YARA rules, calculate entropy, and identify embedded IOCs for rapid detection of potential cyber threats.
Yes, generate detailed forensic reports in PDF or HTML format for stakeholder communication using WeasyPrint and Markdown, summarizing case data, file triage, and IOC pivot results.
Yes, YARA rule scanning is supported through the yara-python dependency, allowing security analysts to analyze suspicious files and identify potential threats during forensic investigations.
Run targeted OSINT and recon tools against extracted IOCs including domains, IPs, emails, and hashes to explore threat infrastructure and pivot through complex investigation workflows.
Case management and forensic reporting require Flask for the web interface, WeasyPrint for PDF generation, yara-python for file analysis, requests for recon, and Markdown for report formatting.
Yes, persist case data with notes, files, and pivot results to support long-term investigations, enabling security analysts to maintain continuity across complex incident response workflows.
XerrionExtract IoCs, map MITRE ATT&CK, and author YARA/Sigma rules.
SherifEldeebGenerate formal forensic reports from investigation findings and evidence.
rjonhaasScan file systems and memory images with YARA and endpoints via Velociraptor hunts.
richardnguyen0715Investigate open-source repositories for deleted commits and force-push detection.
