# Computer Forensics

> Investigate digital evidence with chain-of-custody discipline and repeatable analysis methods. Use when handling incidents, collecting artifacts, timeline reconstruction, or preparing defensible findings.

- Skill: `nikopj01/computer-forensics` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add nikopj01/computer-forensics`
- Raw SKILL.md: https://api.skillmd.com/api/skills/nikopj01/computer-forensics/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: nikopj01 (https://skillmd.com/u/nikopj01)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/nikopj01/computer-forensics

---


# Computer Forensics

## Workflow
1. Preserve evidence integrity (hashing, immutable copies, custody logs).
2. Acquire and catalog artifacts from disk, memory, logs, and network traces.
3. Build timelines and correlate events across sources.
4. Identify indicators, attacker actions, and affected assets.
5. Produce a defensible report with methods, evidence, and confidence levels.