StealIt
Seth HobsonClaude skill for coding

Memory Forensics

memory-forensics

Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility and related tools. Use when analyzing memory dumps, investigating incidents, or performing malware analysis from RAM captures.

Install

Run this in your project folder. It works with Claude Code, Cursor, Codex and dozens of other agents.

$ npx skills add wshobson/agents --skill memory-forensics

Needs Node.js. Add -g to install for every project, or -a claude-code to skip the agent picker.

How to use Memory Forensics

Once it's installed, Claude reads this skill on its own whenever a request matches what it's for, so you don't have to mention it by name. In Claude Code you can also run it directly by typing /memory-forensics.

It contains no scripts, only instructions and reference files, so it can't run code on its own.

What the instructions cover

  1. 1When to Use This Skill
  2. 2Memory Acquisition
  3. 3Detailed section: Volatility 3 Framework
  4. 4Analysis Workflows
  5. 5Data Structures
  6. 6Detection Patterns
  7. 7YARA Integration
  8. 8String Analysis
  9. 9Best Practices

Section headings from the skill's SKILL.md file.

What's inside · 2 files

  • SKILL.md
  • references/details.md

More from Seth Hobson

See all →

Accessibility Compliance

Implement WCAG 2.2 compliant interfaces with mobile accessibility, inclusive design patterns, and assistive technology support. Use when auditing accessibility, implementing ARIA…

Design & UISeth Hobson42k

AI Debt Detector

Use after generating code, after accepting AI suggestions, or when reviewing AI-written modules. Also use when code works but feels brittle, when error handling seems thin, when…

AI & AgentsSeth Hobson42k

Airflow Dag Patterns

Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling…

Data & DatabasesSeth Hobson42k

Angular Migration

Migrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates. Use when upgrading AngularJS applications, planning…

FrontendSeth Hobson42k

More Claude skills for coding

See all →

BrainstormingTop pick

You MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or planning anything new, in software or out of it…

Coding WorkflowJesse Vincent312k

Grill MeTop pick

A relentless interview to sharpen a plan or design.

Coding WorkflowMatt Pocock313k

Systematic DebuggingTop pick

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Coding WorkflowJesse Vincent312k

CavemanTop pick

Terse caveman voice: answer first, fluff gone, every technical fact kept. Use for /caveman, "caveman mode", "talk like caveman", "be brief", "less tokens". Stays on until "stop…

Coding WorkflowJulius Brussee117k