performing-endpoint-forensics-investigation
CommunityEnd-to-end endpoint forensics.
Education & Research#timeline#endpoint#forensics#incident-investigation#memory-analysis#disk-imaging
AuthorYukiIto1999
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Endpoint compromises require thorough evidence collection and timeline reconstruction to support incident response and legal proceedings.
Core Features & Use Cases
- Comprehensive data collection: memory, disk images, and artifact repositories for endpoint incidents.
- Timeline reconstruction: consolidate artifacts to reveal attacker behavior and timelines.
- Forensic workflow: supports Volatility 3, KAPE, imaging tools, and artifact parsers for Windows endpoints.
Quick Start
Run the endpoint forensics agent to begin collecting memory, disk images, artifacts, and timeline data from the compromised machine.
Dependency Matrix
Required Modules
None requiredComponents
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: performing-endpoint-forensics-investigation Download link: https://github.com/YukiIto1999/ctf-sleuth/archive/main.zip#performing-endpoint-forensics-investigation Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.