Generate forensic super-timelines with Plaso's log2timeline.py, pinfo.py, psort.py, and psteal.py CLI tools (fusing file-system MACB, registry, EVTX, browser history, prefetch, LNK, and more), then triage and filter the results in Timesketch. Use when reconstructing the full sequence of events on a compromised or forensically imaged host during a DFIR investigation.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-super-timelines-with-plasonpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-super-timelines-with-plaso -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-super-timelines-with-plaso -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/building-super-timelines-with-plasogh skill install mukul975/Anthropic-Cybersecurity-Skills building-super-timelines-with-plasogit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-super-timelines-with-plaso ~/.claude/skills/building-super-timelines-with-plaso # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-super-timelines-with-plaso ~/.agents/skills/building-super-timelines-with-plaso # Codex, Cursor, Gemini CLI, Copilot, OpenCode