Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with Volatility 3 framework. Extracts process lists, network connections, bash history, loaded kernel modules, and injected code from Linux memory images. Use when performing incident response on compromised Linux systems.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-memory-forensics-with-lime-and-volatilitynpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-memory-forensics-with-lime-and-volatility -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-memory-forensics-with-lime-and-volatility -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/analyzing-memory-forensics-with-lime-and-volatilitygh skill install mukul975/Anthropic-Cybersecurity-Skills analyzing-memory-forensics-with-lime-and-volatilitygit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-memory-forensics-with-lime-and-volatility ~/.claude/skills/analyzing-memory-forensics-with-lime-and-volatility # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-memory-forensics-with-lime-and-volatility ~/.agents/skills/analyzing-memory-forensics-with-lime-and-volatility # Codex, Cursor, Gemini CLI, Copilot, OpenCode