Analyze memory dumps using Volatility3 plugins to detect injected code, rootkits, credential theft, and malware artifacts in Windows, Linux, and macOS memory images.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-memory-forensics-with-volatility3-pluginsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-memory-forensics-with-volatility3-plugins -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-memory-forensics-with-volatility3-plugins -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-memory-forensics-with-volatility3-pluginsgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-memory-forensics-with-volatility3-pluginsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-memory-forensics-with-volatility3-plugins ~/.claude/skills/performing-memory-forensics-with-volatility3-plugins # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-memory-forensics-with-volatility3-plugins ~/.agents/skills/performing-memory-forensics-with-volatility3-plugins # Codex, Cursor, Gemini CLI, Copilot, OpenCode