Memory Forensics
wshobson/agentsMemory forensics helps you find evidence of attacks hidden in a computer's RAM. When a virus runs, its code stays in memory until the computer shuts down. By analyzing a memory dump, you can see what the malware did, find stolen data, and understand the attack.
This skill teaches you how to capture memory from Windows, Linux, and Mac systems. You will use tools like Volatility 3 to list running processes, network connections, and injected code. It is useful for incident responders, security analysts, and anyone who wants to investigate a breach.
You will also learn to extract artifacts such as credentials, browser sessions, and open files. With these techniques, you can quickly triage a compromised machine without needing the original hard drive.
Add Memory Forensics skill to your workflow
Global
mkdir -p ~/.claude/skills/memory-forensicsProject
mkdir -p .claude/skills/memory-forensicsSource Repository
More Security Claude Code Skills
Azure Compliancemicrosoft/azure-skills
Audit Azure compliance and Key Vault expiration with azqr scans
Firebase Security Rules Auditorfirebase/agent-skills
Find weak spots in Firestore rules and get clear fixes
Golang Securitysamber/cc-skills-golang
Find and fix security flaws in Go code using expert guidance and automated tools
Clerk Nextjs Patternsclerk/skills
Secure your Next.js app with Clerk middleware, server actions, and caching
Persona It Admingoogleworkspace/cli
Keep your digital workspace safe with IT admin security workflows
Two Factor Authentication Best Practicesbetter-auth/skills
Secure user logins with two-factor authentication using Better Auth
Gws Modelarmor Create Templategoogleworkspace/cli
Create new templates for Google Model Armor to protect AI apps from harmful content
Gws Modelarmor Sanitize Promptgoogleworkspace/cli
Clean user prompts safely with Google Model Armor templates