Skills
.Work. You
Rest

windows-ir

Community

Windows IR: detect, analyze, and respond.

Data & Analytics#forensics#log-analysis#incident-response#threat-hunting#cyber-security#windows-ir
Authorchenchunrun
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Windows IR often requires rapid detection and forensic analysis across many endpoints to identify intrusions, preserve evidence, and guide containment.

Core Features & Use Cases

  • Phase-driven checks for log, process, and persistence analysis
  • Webshell detection workflow with references to efficiency
  • Automated reporting and evidence gathering for incident response playbooks

Quick Start

Run the Windows IR investigation workflow across endpoints by loading the included scripts and references.

Dependency Matrix

Required Modules

psutil

Components

scriptsreferences

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: windows-ir
Download link: https://github.com/chenchunrun/onyx-soc/archive/main.zip#windows-ir

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.