danielrosehill/Claude-Digital-Evidence-Plugin

bag-evidence

Use when packaging evidence into a BagIt-compliant archival container.

capture-webpage

Use when archiving a URL as a self-contained offline HTML file with hash verification.

environment-check

Use when assessing whether forensics CLI tools are installed and available.

hash-evidence

Use when computing cryptographic hashes (SHA-256, BLAKE3) for files or directories.

inspect-metadata

Use when extracting and analyzing metadata (EXIF, MediaInfo) from files.

install-dependencies

Use when environment-check reports missing tools and you need to install them.

onboard

Use when setting up the digital-evidence plugin for the first time.

reference-lookup

Use when searching vendored Digital-Evidence-Toolkit guidance for tool recommendations and legal-procedural context.

setup-storage-mounts

Use when configuring immutable storage destinations (S3, Wasabi, etc.) for evidence archival.

sync-to-immutable

Use when uploading evidence to immutable storage (S3 Object Lock, Wasabi) with integrity verification.

timestamp-evidence

Use when anchoring a file hash to Bitcoin via OpenTimestamps for immutable proof-of-existence.

verify-bundle

Use when re-hashing evidence and verifying against recorded hashes and OpenTimestamps proofs.