target-profiling

Collect a baseline system profile over SSH for forensic analysis.

175|26|Updated Aug 14, 2025

Search Tags:#reconnaissance #profiling #incident response #ssh #forensics #system baseline

Ready to run

npx skills add https://github.com/jmagly/aiwg --skill target-profiling-jmagly

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: target-profiling
Source: https://github.com/jmagly/aiwg/tree/main/agentic/code/frameworks/forensics-complete/skills/target-profiling
Command: npx skills add https://github.com/jmagly/aiwg --skill target-profiling-jmagly

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the crucial first step of any forensic investigation: understanding the target system's current state by collecting essential configuration and operational data.

Core Features & Use Cases

Comprehensive System Baseline: Gathers OS details, running services, user accounts, network configuration, and security tools.
Automated Data Collection: Connects via SSH and executes commands to gather information.
Use Case: Before investigating a suspected breach on a web server, use this skill to quickly generate a detailed profile of its OS, active network connections, and running processes to establish a baseline.

Quick Start

Profile the target system at [email protected].

Frequently Asked Questions about target-profiling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I collect a system baseline over SSH for incident response?▼

To collect a system baseline over SSH for incident response, you can use automated scripts that connect remotely to gather OS details, running services, user accounts, and network configurations into a point-in-time snapshot for analysis.

What information is included in a Linux forensic profile?▼

A Linux forensic profile includes the OS identity, active network connections, running processes, local user accounts, and installed security tooling to establish the current state of the target system during an investigation.

Do I need special agents installed to profile a remote server via SSH?▼

You do not need special agents installed to profile a remote server via SSH. The remote collection process requires only standard Linux command-line utilities and active SSH access to the target system.

Can I use this system profiling method to detect a suspected breach?▼

You can use this system profiling method to detect a suspected breach by generating a detailed inventory of active network connections and running services, establishing a baseline to identify anomalous activity.

What are the limitations of using SSH for remote system reconnaissance?▼

Limitations of using SSH for remote system reconnaissance include relying on the availability of standard Linux command-line utilities on the target machine, and requiring active network access and valid credentials.