windows-execution-analysis
CommunityReproduce and analyze Windows process artifacts efficiently.
Authormgreen27
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill streamlines the collection and analysis of Windows process execution artifacts to support incident response investigations.
Core Features & Use Cases
- Artifact Collection: Automatically gathers evidence of process execution from Windows clients, including registry and system timeline data.
- Data Reuse & Validation: Reuses previous evidence collection when available, reducing redundant operations and ensuring data integrity.
- Use Case: Investigators can quickly gather execution artifacts across multiple hosts to identify malicious activity and verify process behaviors during a breach investigation.
Quick Start
Use this Skill to collect execution artifacts from specified Windows hosts, then review the generated reports for suspicious activity.
Dependency Matrix
Required Modules
None requiredComponents
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: windows-execution-analysis Download link: https://github.com/mgreen27/dfir-skills/archive/main.zip#windows-execution-analysis Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.