performing-endpoint-forensics-investigation
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for running standard forensic utilities such as Volatility 3, KAPE, and various tools by Eric Zimmerman. These commands are necessary for the skill's primary purpose of performing digital forensics and incident response.
- [SAFE]: No malicious patterns, obfuscation, or data exfiltration attempts were detected. The commands provided are local and intended for evidence collection on a target machine by an authorized investigator.
- [EXTERNAL_DOWNLOADS]: The skill mentions external forensic tools like FTK Imager, WinPMEM, and Autopsy. These are recognized as legitimate software within the cybersecurity domain, and the skill does not attempt to automate their download or execution from untrusted sources.
Audit Metadata