Recovers files from disk images and unallocated space using Foremost's header-footer signature carving, extracting evidence independent of the file system's state. Use during digital forensics investigations to carve deleted or fragmented files, such as documents, images, and archives, from raw disk images or unallocated space.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-file-carving-with-foremostnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-file-carving-with-foremost -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-file-carving-with-foremost -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-file-carving-with-foremostgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-file-carving-with-foremostgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-file-carving-with-foremost ~/.claude/skills/performing-file-carving-with-foremost # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-file-carving-with-foremost ~/.agents/skills/performing-file-carving-with-foremost # Codex, Cursor, Gemini CLI, Copilot, OpenCode