← All skills
memory-forensics
80 / 100 · Low risk
Fine to try.
By boisenoise/skills-collections (GitHub) · other · 12 stars · scanned at commit 419c39f
Comprehensive techniques for acquiring, analyzing, and extracting artifacts from memory dumps for incident response and malware analysis.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this.
Found in 19 places.
Show 16 more
- skills/antigravity-memory-forensics/SKILL.md, line 96
pip install volatility3 - skills/antigravity-memory-forensics/SKILL.md, line 113
vol -f memory.raw windows.pslist - skills/antigravity-memory-forensics/SKILL.md, line 134
vol -f memory.raw windows.netscan - skills/antigravity-memory-forensics/SKILL.md, line 143
vol -f memory.raw windows.dlllist --pid <PID> - skills/antigravity-memory-forensics/SKILL.md, line 158
vol -f memory.raw windows.malfind - skills/antigravity-memory-forensics/SKILL.md, line 170
vol -f memory.raw windows.registry.hivelist - skills/antigravity-memory-forensics/SKILL.md, line 182
vol -f memory.raw windows.filescan - skills/antigravity-memory-forensics/SKILL.md, line 195
vol -f memory.raw linux.pslist - skills/antigravity-memory-forensics/SKILL.md, line 220
vol -f memory.raw mac.pslist - skills/antigravity-memory-forensics/SKILL.md, line 238
vol -f memory.raw windows.pstree > processes.txt - skills/antigravity-memory-forensics/SKILL.md, line 265
vol -f memory.raw windows.timeliner > timeline.csv - skills/antigravity-memory-forensics/SKILL.md, line 368
vol -f memory.raw windows.pslist > pslist.txt - skills/antigravity-memory-forensics/SKILL.md, line 387
vol -f memory.raw windows.hashdump - skills/antigravity-memory-forensics/SKILL.md, line 438
vol -f memory.raw windows.yarascan --yara-rules rules.yar - skills/antigravity-memory-forensics/SKILL.md, line 453
strings -a memory.raw > all_strings.txt - skills/antigravity-memory-forensics/SKILL.md, line 470
floss malware.exe > floss_output.txt
Downloads and installs other software
The author does not mention this.
Found in 1 place.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'memory-forensics' ] || [ -L ~/.agents/skills/'memory-forensics' ]; then echo 'A skill folder named memory-forensics already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/boisenoise/skills-collections' "$d" && git -C "$d" checkout --quiet '419c39fde874b8baecbb36a397b967e0190a2ece' -- 'skills/antigravity-memory-forensics' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/antigravity-memory-forensics' ~/.agents/skills/'memory-forensics' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'memory-forensics' ~/.claude/skills/'memory-forensics' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for boisenoise/skills-collections shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/boisenoise/skills-collections/)
Score history
| Date | Version | Score |
|---|
| 2026-11-12 | 419c39f | 80 |
| 2026-11-08 | 5fe45e5 | 80 |
| 2026-11-06 | b89b2f5 | 80 |