Perform forensic investigation of Linux system logs including syslog, auth.log, systemd journal (via journalctl), kern.log, auditd, and application logs to reconstruct user sessions, identify unauthorized access and privilege escalation, trace lateral movement, and establish event timelines.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-linux-log-forensics-investigationnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-linux-log-forensics-investigation -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-linux-log-forensics-investigation -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-linux-log-forensics-investigationgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-linux-log-forensics-investigationgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-linux-log-forensics-investigation ~/.claude/skills/performing-linux-log-forensics-investigation # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-linux-log-forensics-investigation ~/.agents/skills/performing-linux-log-forensics-investigation # Codex, Cursor, Gemini CLI, Copilot, OpenCode