Summary
磁盘取证与反磁盘取证方法论。理解蓝队如何从磁盘恢复删除文件、提取时间线、分析文件系统 artifact，以及红队如何进行反取证（安全删除、时间戳篡改、痕迹清除）。当需要规避磁盘取证或进行磁盘分析时使用
wgpsec/aboutsecurity
disk-forensics-evasion
磁盘取证与反磁盘取证方法论。理解蓝队如何从磁盘恢复删除文件、提取时间线、分析文件系统 artifact，以及红队如何进行反取证（安全删除、时间戳篡改、痕迹清除）。当需要规避磁盘取证或进行磁盘分析时使用
Installation
$
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
memory-forensics
Similar name
wshobson/agents
Master memory forensics techniques including memory acquisition, process analysis, and artifact…
9.8K installs
ctf-forensics
Similar name
ljagiello/ctf-skills
Provides digital forensics and signal analysis techniques for CTF challenges.
7.4K installs
memory-forensics-volatility
Similar name
yaklang/hack-skills
>- Memory forensics playbook using Volatility 2/3. Use when analyzing memory dumps for malware …
2.9K installs
digital-forensics
Similar name
zhaoxuya520/reverse-skill
Use for authorized digital forensics including memory dumps, disk timelines, PCAP investigation…
13 installs
analyzing-browser-forensics-with-hindsight
Similar name
mukul975/anthropic-cybersecurity-skills
Parse Chromium-based browser databases with Hindsight to extract and correlate browsing history…
574 installs
analyzing-docker-container-forensics
Similar name
mukul975/anthropic-cybersecurity-skills
Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runti…
553 installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Repository health
Stars
1.7K
Default branch
master
Open issues
0
Status
Active
History
- First seen on skills.sh
- First recorded snapshot · 33 installs