oss-forensics

You can investigate deleted commits and detect force-pushes by loading the skill and specifying the target repository scope to initiate a multi-agent forensic workflow. The process enforces a seven-phase framework that recovers evidence across local git data and the GitHub API.

Yes, IOC extraction and cross-source evidence correlation are supported across Git, GitHub API, Wayback Machine, and GH Archive. The integrated evidence store enables multi-source analysis to correlate artifacts and validate hypotheses for supply chain investigations.

Reproducible forensic reports are generated through structured reporting following hypothesis formation and validation. The seven-phase investigation framework produces defensible executive reports suitable for compliance and forensic workflows.

Yes, the skill coordinates multi-source analysis simultaneously across local git data and the GitHub API. It uses an integrated evidence store to correlate findings from multiple sources into a single reproducible investigation workflow.

A phase-based investigation framework is needed when conducting supply chain investigations that require defensible, reproducible workflows. It enforces a structured seven-phase process covering evidence recovery, correlation, and reporting for compliance.

Hypothesis formation and validation structure the forensic analysis to ensure evidence correlates correctly across sources. This process validates findings before generating structured reports, ensuring the investigation remains defensible and reproducible.