Build collaborative forensic incident timelines using Timesketch to ingest, normalize, and analyze multi-source event data (including Plaso output) for attack chain reconstruction and investigation documentation. Use when reconstructing the sequence of events during an incident investigation or when multiple analysts need to jointly tag, annotate, and search a shared DFIR timeline.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-incident-timeline-with-timesketchnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-incident-timeline-with-timesketch -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-incident-timeline-with-timesketch -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/building-incident-timeline-with-timesketchgh skill install mukul975/Anthropic-Cybersecurity-Skills building-incident-timeline-with-timesketchgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-incident-timeline-with-timesketch ~/.claude/skills/building-incident-timeline-with-timesketch # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-incident-timeline-with-timesketch ~/.agents/skills/building-incident-timeline-with-timesketch # Codex, Cursor, Gemini CLI, Copilot, OpenCode