Packs

1 pack

Windows Forensics Toolkit

For digital forensics analysts investigating Windows systems using registry artifacts, prefetch, and event logs.

6 skills · pack

Results for “forensics”

6 skills

conducting-memory-forensics-with-volatility

Analyze RAM dumps with Volatility 3 to detect malware, process injection, network connections, and credential theft during incident response.

24.6k · bundle

competition-identity-windows

Traces identity flows, Windows host artifacts, enterprise messaging, and lateral-movement chains in CTF sandbox challenges.

12.8k · bundle

competition-stego-media

Inspects metadata, hidden channels, and appended payloads in media files to recover concealed data in steganography challenges.

12.8k · bundle

More results

analyzing-bootkit-and-rootkit-samples

Analyzes bootkit and rootkit malware that infects MBR, VBR, or UEFI firmware for pre-OS persistence, covering boot sector analysis, UEFI module inspection, and anti-rootkit detection.

24.6k · bundle

analyzing-heap-spray-exploitation

Detect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns, shellcode landing zones, and suspicious large allocations in process virtual address space.

24.6k · bundle

Generate a persistent .nexus-map/ knowledge base that lets any AI session instantly understand a codebase's architecture, systems, dependencies, and change hotspots. Use when starting work on an unfamiliar repository, onboarding with AI-assisted context, preparing for a major refactoring initiative, or enabling reliable cold-start AI sessions across a team. Produces INDEX.md, systems.md, concept_model.json, git_forensics.md and more. Requires shell execution and Python 3.10+. For ad-hoc file queries or instant impact analysis during active development, use nexus-query instead.