Dfir Toolkit

Use this skill when the user wants to cli tools for forensic investigation of windows artifacts.

javimosch c33771e 982 B Updated

File contents

Dfir-toolkit Plugin

CLI tools for forensic investigation of Windows artifacts.

Commands

Operations

  • dfir-toolkit artifact analyze — analyze artifact via dfir-toolkit
  • dfir-toolkit artifact extract — extract artifact via dfir-toolkit
  • dfir-toolkit registry parse — parse registry via dfir-toolkit
  • dfir-toolkit event-log parse — parse event-log via dfir-toolkit
  • dfir-toolkit timeline generate — generate timeline via dfir-toolkit
  • dfir-toolkit report generate — generate report via dfir-toolkit
  • dfir-toolkit config show — show config via dfir-toolkit

Usage Examples

  • "dfir-toolkit --help"
  • "dfir-toolkit "

Installation

cargo install dfir-toolkit

Examples

dfir-toolkit --version
dfir-toolkit --help

Key Features

  • forensics\n- windows\n- security

javimosch/supercli/tree/main/plugins/dfir-toolkit/skills/quickstart commit c33771ed66

Frequently asked questions

npx skillmds@latest add javimosch/dfir-toolkit