Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

memory-forensics

Estrellas2

Forks1

Actualizado15 de marzo de 2026 a las 08:19

Analyze a memory dump — process analysis, network connections, persistence mechanisms, malware detection with Volatility3, and reporting.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

valITino

valITino/dfireballz

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas·SOC 15-1212

SKILL.md

readonly

name	memory-forensics
description	Analyze a memory dump — process analysis, network connections, persistence mechanisms, malware detection with Volatility3, and reporting.

Perform memory forensics analysis on the specified target.

Usage: /memory-forensics <target>

Where <target> is the memory dump path — e.g. /evidence/memdump.raw, /evidence/memory.dmp.

If no target is provided, ask the user for the memory dump location.

Instructions

Load the investigation template: call get_template(name="memory-forensics", target="$ARGUMENTS")
Follow all 6 phases: Evidence Handling, Process Analysis, Network Analysis, Persistence & Artifacts, Malware Detection, Reporting
Use these MCP servers: kali-forensics (Volatility3, YARA, bulk_extractor), threat-intel, filesystem
Scan for injected processes and hidden modules
Log chain of custody before accessing the memory dump
Generate report with process tree, network connections, and IoCs

Más de este repositorio

mismo repositorio

complete-investigation

valITino/dfireballz

Run a full 11-phase forensic investigation across all MCP servers — disk, memory, Windows artifacts, malware, network, OSINT, threat intel, timeline, and reporting.

2026-03-152

full-investigation

valITino/dfireballz

Run a 6-phase forensic investigation — evidence intake, artifact collection, network analysis, threat intel, timeline reconstruction, and reporting.

2026-03-152

incident-response

valITino/dfireballz

Run a 7-phase incident response — triage, containment assessment, evidence collection, attack chain reconstruction, threat intel, impact assessment, and reporting.

2026-03-152

malware-analysis

valITino/dfireballz

Analyze a malware sample — static analysis with Ghidra/Radare2/Capa, YARA scanning, string extraction, and VirusTotal/MalwareBazaar lookup.

2026-03-152

network-forensics

valITino/dfireballz

Analyze network traffic — PCAP triage, protocol analysis, anomaly detection, IoC extraction, stream reconstruction, and reporting.

2026-03-152

osint-domain

valITino/dfireballz

Investigate a domain — DNS/subdomain enumeration, infrastructure analysis, threat assessment, web presence mapping, and reporting.

2026-03-152

name	memory-forensics
description	Analyze a memory dump — process analysis, network connections, persistence mechanisms, malware detection with Volatility3, and reporting.

Perform memory forensics analysis on the specified target.

Usage: /memory-forensics <target>

Where <target> is the memory dump path — e.g. /evidence/memdump.raw, /evidence/memory.dmp.

If no target is provided, ask the user for the memory dump location.

Instructions

Load the investigation template: call get_template(name="memory-forensics", target="$ARGUMENTS")
Follow all 6 phases: Evidence Handling, Process Analysis, Network Analysis, Persistence & Artifacts, Malware Detection, Reporting
Use these MCP servers: kali-forensics (Volatility3, YARA, bulk_extractor), threat-intel, filesystem
Scan for injected processes and hidden modules
Log chain of custody before accessing the memory dump
Generate report with process tree, network connections, and IoCs