of-windows-artifacts
Interpret explicitly supplied Windows forensic CSV exports with evidence-linked timelines. Use for EVTX, Prefetch, registry or NTFS exports from an operator-selected parser; not for live collection, binary artifact parsing or inferring execution from every artifact timestamp.
- Version
- 0.2.0
- License
- Apache-2.0
Pinned to revision 07256abf8c1d, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/of-windows-artifacts/SKILL.md
- skills/of-windows-artifacts/LICENSE
- skills/of-windows-artifacts/NOTICE
- skills/of-windows-artifacts/agents/openai.yaml
- skills/of-windows-artifacts/references/assurance-workflows.md
- skills/of-windows-artifacts/references/case-contract.md
- skills/of-windows-artifacts/references/research-workflows.md
- skills/of-windows-artifacts/references/review-workflows.md
- skills/of-windows-artifacts/references/source-workflows.md
- skills/of-windows-artifacts/references/tool-workflows.md
- skills/of-windows-artifacts/references/workflow.md
- skills/of-windows-artifacts/scripts/forge.py
- skills/of-windows-artifacts/scripts/forgekit/__init__.py
- skills/of-windows-artifacts/scripts/forgekit/agents.py
- skills/of-windows-artifacts/scripts/forgekit/analysis.py
- skills/of-windows-artifacts/scripts/forgekit/assurance.py
- skills/of-windows-artifacts/scripts/forgekit/casefiles.py
- skills/of-windows-artifacts/scripts/forgekit/cli.py
- skills/of-windows-artifacts/scripts/forgekit/dorking.py
- skills/of-windows-artifacts/scripts/forgekit/exchange.py
- skills/of-windows-artifacts/scripts/forgekit/mcp.py
- skills/of-windows-artifacts/scripts/forgekit/planning.py
- skills/of-windows-artifacts/scripts/forgekit/reporting.py
- skills/of-windows-artifacts/scripts/forgekit/research.py
- skills/of-windows-artifacts/scripts/forgekit/review.py
- skills/of-windows-artifacts/scripts/forgekit/safeio.py
- skills/of-windows-artifacts/scripts/forgekit/sources.py
- skills/of-windows-artifacts/scripts/forgekit/timestamps.py
- skills/of-windows-artifacts/scripts/forgekit/tooling.py
- skills/of-windows-artifacts/scripts/forgekit/viewer.py
Every link opens the file at its source, pinned to the revision this page describes.