Computer Forensics

Investigate digital evidence with chain-of-custody discipline and repeatable analysis methods. Use when handling incidents, collecting artifacts, timeline reconstruction, or preparing defensible findings.

nikopj01 Updated

File contents

Computer Forensics

Workflow

  1. Preserve evidence integrity (hashing, immutable copies, custody logs).
  2. Acquire and catalog artifacts from disk, memory, logs, and network traces.
  3. Build timelines and correlate events across sources.
  4. Identify indicators, attacker actions, and affected assets.
  5. Produce a defensible report with methods, evidence, and confidence levels.

nikopj01/codex-skills/tree/main/computer-forensics commit 9522ae1f7f

Frequently asked questions

npx skillmds@latest add nikopj01/computer-forensics