registry-forensics

Features and purpose

Analyze Windows Registry hives for forensic investigation. Use when investigating malware persistence, user activity, system configuration changes, or evidence of program execution. Supports offline registry analysis from disk images or extracted hives.

Quick start

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.