memory-forensics-evasion

SUSPICIOUS: the skill is internally consistent, but its purpose is to equip an AI agent with offensive anti-forensics, stealth, and credential-access techniques rather than ordinary DFIR. There is no confirmed malware or exfiltration path in the files, but the capability set is high-risk and inappropriate for general agent use.

这是面向红队反检测和反取证的高风险技术说明文档，内容明显涉及隐藏进程、注入代码、规避内存扫描和阻碍转储。它本身是非执行性 Markdown，不包含可直接运行的恶意载荷、数据窃取或网络外传行为，因此不能认定该文件本身包含 malware；但将其作为攻击操作指南使用会显著增加规避安全检测和取证的能力。