Conduct disk forensics investigations using forensic imaging, file system analysis, and timeline reconstruction, with tools such as FTK Imager, Autopsy, and The Sleuth Kit, for evidence acquisition, deleted file recovery, and artifact examination. Use when a security incident requires forensic analysis of persistent storage or when evidence must be preserved for legal or HR proceedings.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-disk-forensics-investigationnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-disk-forensics-investigation -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-disk-forensics-investigation -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-disk-forensics-investigationgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-disk-forensics-investigationgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-disk-forensics-investigation ~/.claude/skills/performing-disk-forensics-investigation # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-disk-forensics-investigation ~/.agents/skills/performing-disk-forensics-investigation # Codex, Cursor, Gemini CLI, Copilot, OpenCode