Create structured investigation case folders with documentation and CSV templates.
npx skills add https://github.com/mgreen27/dfir-skills --skill investigation-mgreen27
Please help me install this Agent Skill. Skill: investigation Source: https://github.com/mgreen27/dfir-skills/tree/main/skills/investigation Command: npx skills add https://github.com/mgreen27/dfir-skills --skill investigation-mgreen27
This Skill provides a comprehensive framework for organizing and maintaining an investigation case folder with structured documentation, CSV data, and narrative wikis, facilitating efficient incident response.
Run the init_investigation script with the investigation ID to set up the case folder structure and templates.
High-intent search queries and answers about installing and using this skill.
Setting up an incident response directory scaffold creates structured folders for evidence, wikis, and spreadsheets. This framework initializes standardized Markdown documentation and CSV templates to ensure consistent DFIR case management and collaborative analysis.
Standardizing DFIR investigation folders involves initializing consistent directory structures with standardized Markdown pages and CSV templates. This ensures uniform data management, supports iterative analysis workflows, and maintains long-term case tracking across multiple incidents.
Yes, this case management scaffold supports collaborative incident analysis by creating shared evidence, wiki, and spreadsheet directories. These standardized templates enable multiple analysts to conduct iterative DFIR investigations and maintain long-term case tracking efficiently.
Initializing CSV templates and Markdown wikis requires running the setup script with your investigation ID. This generates the case folder scaffold, populating it with standardized documentation and data repositories to facilitate immediate incident response analysis.
No, this incident response framework operates without external dependencies. It independently creates the necessary directory structure for investigations, including evidence, wiki, and spreadsheet directories, using self-contained scripts, references, and assets to scaffold your case management workspace.
bennoloefflerMove a single Microsoft 365 email message to the Archive folder.
matthew-johnsonIngest and organize knowledge into a persistent, interlinked Markdown wiki.
gadievronOrchestrate OSS forensic investigations across public GitHub repositories with phase-driven workflows.
I-OnlabsAutomates project scaffolding with starter templates for Next.js, React, Node.js, Python, and mobile.
