[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6H9SEH0YYA58TFZPCSC3KP9":3,"skill-same:01M6H9SEH0YYA58TFZPCSC3KP9":56},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":28,"linkOnly":29,"markdownContent":30,"markdownBody":31,"frontMatter":32,"refName":34,"commitSha":35,"skillDirectory":36,"forksCount":14,"repositoryHtmlUrl":37,"repositoryHomepageUrl":6,"ownerHtmlUrl":38,"ownerBlogUrl":39,"ownerDescription":40,"updatedAt":41,"install":42,"resources":55},"01M6H9SEH0YYA58TFZPCSC3KP9","forensics",null,"Digital forensics, incident response, evidence collection, and forensic analysis","NeuralBlitz\u002FMito","NeuralBlitz","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F79354388?v=4","01M6H8T2TFH477HRS0KTSTKR2E","David Riggs","01M6H8T2YQQDXPYM092P670Z21",0,"MIT","https:\u002F\u002Fgithub.com\u002FNeuralBlitz\u002FMito\u002Fblob\u002Fmain\u002F.opencode\u002Fskills\u002Fforensics\u002FSKILL.md",[],[5,19,20,21,22,23,24,25,26,27],"security","cybersecurity","incident response","collection","analysis","evidence","opencode","incident","digital forensics","2026-11-10 10:12:30",false,"---\nname: forensics\ndescription: Digital forensics, incident response, evidence collection, and forensic analysis\nlicense: MIT\ncompatibility: opencode\nmetadata:\n  audience: security\n  category: cybersecurity\n---\n\n## What I do\n- Collect digital evidence properly\n- Analyze forensic artifacts\n- Preserve chain of custody\n- Document findings for legal proceedings\n- Investigate security incidents\n- Recover deleted data\n\n## When to use me\nWhen investigating security incidents, responding to breaches, or conducting digital forensics investigations.\n\n## Evidence Collection\n\n### Order of Volatility\n1. CPU registers, cache\n2. Network connections\n3. Running processes\n4. Memory (RAM)\n5. Network traffic\n6. Disk\n7. Remote logs\n8. Physical config\n9. Media (archival)\n\n### Collection Methods\n- Write blockers\n- Forensic images (DD, E01)\n- Hash verification\n- Live vs dead collection\n- Remote collection\n\n### Chain of Custody\n- Document every access\n- Secure storage\n- Timestamps\n- Who\u002Fwhat\u002Fwhen\u002Fwhy\n\n## Forensic Analysis\n\n### Memory Forensics\n- RAM dump analysis\n- Volatile data extraction\n- Malware detection\n- Rootkit identification\n\n### Disk Forensics\n- File recovery\n- Deleted file analysis\n- Metadata examination\n- Timeline analysis\n- Slack space\n\n### Network Forensics\n- Packet capture analysis\n- Flow analysis\n- Malware communication\n- Intrusion detection\n\n### Browser Forensics\n- History extraction\n- Cookies analysis\n- Cache examination\n- Bookmarks\n\n### Email Forensics\n- Header analysis\n- Attachment extraction\n- Phishing analysis\n\n## Common Artifacts\n\n### Windows\n- Event logs (Security, System, Application)\n- Registry (NTUSER.DAT, SAM, SECURITY)\n- Prefetch\n- Jumplists\n- Recent files\n- Recycle Bin\n\n### Linux\n- Bash history\n- System logs (\u002Fvar\u002Flog)\n- Audit logs\n- Cron jobs\n- SSH keys\n\n### macOS\n- Unified logs\n- Spotlight\n- HFS+\u002FAPFS metadata\n- Keychain\n- Safari artifacts\n\n## Tools\n- **EnCase**: Commercial forensics\n- **FTK**: Full toolkit\n- **Autopsy**: Open source\n- **Volatility**: Memory forensics\n- **Wireshark**: Network analysis\n- **The Sleuth Kit**: File system analysis\n\n## Reporting\n- Executive summary\n- Technical findings\n- Evidence catalog\n- Recommendations\n- Expert testimony preparation\n","## What I do\n- Collect digital evidence properly\n- Analyze forensic artifacts\n- Preserve chain of custody\n- Document findings for legal proceedings\n- Investigate security incidents\n- Recover deleted data\n\n## When to use me\nWhen investigating security incidents, responding to breaches, or conducting digital forensics investigations.\n\n## Evidence Collection\n\n### Order of Volatility\n1. CPU registers, cache\n2. Network connections\n3. Running processes\n4. Memory (RAM)\n5. Network traffic\n6. Disk\n7. Remote logs\n8. Physical config\n9. Media (archival)\n\n### Collection Methods\n- Write blockers\n- Forensic images (DD, E01)\n- Hash verification\n- Live vs dead collection\n- Remote collection\n\n### Chain of Custody\n- Document every access\n- Secure storage\n- Timestamps\n- Who\u002Fwhat\u002Fwhen\u002Fwhy\n\n## Forensic Analysis\n\n### Memory Forensics\n- RAM dump analysis\n- Volatile data extraction\n- Malware detection\n- Rootkit identification\n\n### Disk Forensics\n- File recovery\n- Deleted file analysis\n- Metadata examination\n- Timeline analysis\n- Slack space\n\n### Network Forensics\n- Packet capture analysis\n- Flow analysis\n- Malware communication\n- Intrusion detection\n\n### Browser Forensics\n- History extraction\n- Cookies analysis\n- Cache examination\n- Bookmarks\n\n### Email Forensics\n- Header analysis\n- Attachment extraction\n- Phishing analysis\n\n## Common Artifacts\n\n### Windows\n- Event logs (Security, System, Application)\n- Registry (NTUSER.DAT, SAM, SECURITY)\n- Prefetch\n- Jumplists\n- Recent files\n- Recycle Bin\n\n### Linux\n- Bash history\n- System logs (\u002Fvar\u002Flog)\n- Audit logs\n- Cron jobs\n- SSH keys\n\n### macOS\n- Unified logs\n- Spotlight\n- HFS+\u002FAPFS metadata\n- Keychain\n- Safari artifacts\n\n## Tools\n- **EnCase**: Commercial forensics\n- **FTK**: Full toolkit\n- **Autopsy**: Open source\n- **Volatility**: Memory forensics\n- **Wireshark**: Network analysis\n- **The Sleuth Kit**: File system analysis\n\n## Reporting\n- Executive summary\n- Technical findings\n- Evidence catalog\n- Recommendations\n- Expert testimony preparation\n",{"name":5,"license":15,"metadata":33,"description":7,"compatibility":25},{"audience":19,"category":20},"main","2ea764e153842704d24a2e9aa4170441a7f03081",".opencode\u002Fskills\u002Fforensics","https:\u002F\u002Fgithub.com\u002FNeuralBlitz\u002FMito","https:\u002F\u002Fgithub.com\u002FNeuralBlitz","nuralnexus.org","Theoretical and Futuristic AI Nerd 🤓 ","2026-11-12 03:13:05",{"source":8,"skillName":5,"commands":43,"prompt":53,"zipAvailable":54},[44,47,50],{"tool":45,"command":46},"npx","npx skills add NeuralBlitz\u002FMito --skill forensics",{"tool":48,"command":49},"bunx","bunx skills add NeuralBlitz\u002FMito --skill forensics",{"tool":51,"command":52},"pnpm","pnpm dlx skills add NeuralBlitz\u002FMito --skill forensics","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FNeuralBlitz\u002FMito\u002Fblob\u002Fmain\u002F.opencode\u002Fskills\u002Fforensics\u002FSKILL.md",true,[],[57,73,86,97,105,130],{"skillNo":58,"name":59,"nameZh":6,"description":60,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":61,"categories":62,"keywords":63,"publishedAt":28},"01M6HAZSAQK1S27CEZYAYJTQDX","wireless-communications","Wireless systems, mobile networks, and 5G\u002F6G","https:\u002F\u002Fgithub.com\u002FNeuralBlitz\u002FMito\u002Fblob\u002Fmain\u002F.opencode\u002Fskills\u002Fwireless-communications\u002FSKILL.md",[],[64,65,66,67,68,69,70,71,25,72],"communications","wireless communications","wireless","systems","engineering","networks","5G","students","mobile",{"skillNo":74,"name":75,"nameZh":6,"description":76,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":77,"categories":78,"keywords":79,"publishedAt":28},"01M6HAZFX6E8NK3WZWDX5YCKYY","websockets","WebSocket implementation and best practices","https:\u002F\u002Fgithub.com\u002FNeuralBlitz\u002FMito\u002Fblob\u002Fmain\u002F.opencode\u002Fskills\u002Fwebassembly\u002Fwebsockets\u002FSKILL.md",[],[75,80,81,82,25,83,84,85],"websocket implementation","time","implementation","real-time","websocket","best practices",{"skillNo":87,"name":88,"nameZh":6,"description":89,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":90,"categories":91,"keywords":92,"publishedAt":28},"01M6HAZ6DAXBQ7QHXXM1EM7715","vulnerability-auditing","Vulnerability assessment and auditing","https:\u002F\u002Fgithub.com\u002FNeuralBlitz\u002FMito\u002Fblob\u002Fmain\u002F.opencode\u002Fskills\u002Fvulnerability-auditing\u002FSKILL.md",[],[93,94,19,95,25,20,96],"vulnerability","vulnerability auditing","vulnerability assessment","assessment",{"skillNo":98,"name":99,"nameZh":6,"description":100,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":101,"categories":102,"keywords":103,"publishedAt":28},"01M6HAZ3FKF3CS9Z3J96RVE2ZE","vulnerability-assessment","Finding and assessing security vulnerabilities","https:\u002F\u002Fgithub.com\u002FNeuralBlitz\u002FMito\u002Fblob\u002Fmain\u002F.opencode\u002Fskills\u002Fvue\u002Fvulnerability-assessment\u002FSKILL.md",[],[95,93,96,19,104,25],"vulnerabilities",{"skillNo":106,"name":107,"nameZh":6,"description":108,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":109,"categories":110,"keywords":121,"publishedAt":28},"01M6HAYSHM6HKRKEHFP0SGZQX7","vlsi-design","Very-Large-Scale Integration circuit design and semiconductor engineering","https:\u002F\u002Fgithub.com\u002FNeuralBlitz\u002FMito\u002Fblob\u002Fmain\u002F.opencode\u002Fskills\u002Fvlsi-design\u002FSKILL.md",[111,116],{"categoryNo":112,"categoryName":113,"taxonomyType":114,"taxonomyTypeDesc":115},"01JBSEEDCAT000000000000015","视觉设计","SCENARIO","使用场景",{"categoryNo":117,"categoryName":118,"taxonomyType":119,"taxonomyTypeDesc":120},"01JBSEEDCAT000000000000032","设计师","PROFESSION","适用职业",[122,123,124,125,126,68,127,25,128,71,129],"vlsi design","VLSI","design","hardware","integration","computer","scale","circuit",{"skillNo":131,"name":132,"nameZh":6,"description":133,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":134,"categories":135,"keywords":136,"publishedAt":28},"01M6HAYPQ30FFE2JXD7WQJ8R6C","unsupervised","Unsupervised learning concepts","https:\u002F\u002Fgithub.com\u002FNeuralBlitz\u002FMito\u002Fblob\u002Fmain\u002F.opencode\u002Fskills\u002Fvisualization\u002Funsupervised\u002FSKILL.md",[],[132,137,25,138,139,140,141,142],"learning","intelligence","unsupervised learning","machine","concepts","machine-learning"]