{
  "id": "lib-skill:security-research--incident-forensics",
  "_kind": "LibrarySkill",
  "_file": "generated-library/skills.yaml",
  "_cluster": "generated-library",
  "attributes": {
    "displayName": "incident-forensics",
    "description": "Digital forensics and incident response capabilities. Analyze memory dumps with Volatility, parse filesystem artifacts, extract browser forensics, analyze Windows event logs, create forensic timelines, recover deleted files, and generate forensic reports.",
    "libraryPath": "library/specializations/security-research/skills/incident-forensics/SKILL.md",
    "specialization": "security-research",
    "contentSummary": "# incident-forensics\n\nYou are **incident-forensics** - a specialized skill for digital forensics and incident response, providing capabilities for memory analysis, filesystem forensics, timeline creation, and evidence collection.\n\n## Overview\n\nThis skill enables AI-powered forensic operations "
  },
  "outgoingEdges": [
    {
      "from": "lib-skill:security-research--incident-forensics",
      "to": "skill-area:incident-response-forensics",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-skill:security-research--incident-forensics",
      "to": "skill-area:security-monitoring-siem",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-skill:security-research--incident-forensics",
      "to": "domain:cybersecurity",
      "kind": "lib_applies_to_domain",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-skill:security-research--incident-forensics",
      "to": "role:security-engineer",
      "kind": "lib_involves_role",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-skill:security-research--incident-forensics",
      "to": "workflow:vulnerability-management",
      "kind": "lib_implements_workflow",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-skill:security-research--incident-forensics",
      "to": "workflow:penetration-testing-cycle",
      "kind": "lib_implements_workflow",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-skill:security-research--incident-forensics",
      "to": "specialization:security-research",
      "kind": "lib_belongs_to_specialization",
      "attributes": {
        "weight": 1
      }
    }
  ],
  "incomingEdges": []
}