Perform comprehensive forensic analysis of raw (dd), E01, or AFF disk images with Autopsy and The Sleuth Kit, recovering deleted files, examining metadata and embedded artifacts, keyword searching, and building investigation timelines with visual reports. Use for structured analysis of a forensic disk image or when stakeholders need visual reports from evidence.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-disk-image-with-autopsynpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-disk-image-with-autopsy -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-disk-image-with-autopsy -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/analyzing-disk-image-with-autopsygh skill install mukul975/Anthropic-Cybersecurity-Skills analyzing-disk-image-with-autopsygit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-disk-image-with-autopsy ~/.claude/skills/analyzing-disk-image-with-autopsy # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-disk-image-with-autopsy ~/.agents/skills/analyzing-disk-image-with-autopsy # Codex, Cursor, Gemini CLI, Copilot, OpenCode