Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, network connections, and credential theft from RAM dumps captured during incident response. Covers memory acquisition, process analysis, DLL inspection, and malware detection.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill conducting-memory-forensics-with-volatilitynpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill conducting-memory-forensics-with-volatility -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill conducting-memory-forensics-with-volatility -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/conducting-memory-forensics-with-volatilitygh skill install mukul975/Anthropic-Cybersecurity-Skills conducting-memory-forensics-with-volatilitygit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/conducting-memory-forensics-with-volatility ~/.claude/skills/conducting-memory-forensics-with-volatility # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/conducting-memory-forensics-with-volatility ~/.agents/skills/conducting-memory-forensics-with-volatility # Codex, Cursor, Gemini CLI, Copilot, OpenCode