AI & Machine Learning
Competition Forensic Timeline
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for DFIR chronology, cross-artifact correlation, persistence chains, and incident timeline reconstruction. Use when the user asks to build a forensic timeline, correlate EVTX, PCAP, registry, disk, memory, mailbox, or browser artifacts, explain the order of attacker actions, or pinpoint the stage where the decisive artifact appears. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
- Publisher / source
- zhaoxuya520/reverse-skill (found on skills.sh, an awesome list, the CSV list)
- Upstream record
- zhaoxuya520/reverse-skill
- Version
- Version 2
- Published
- Publication review
- Approved for publication
- Content fingerprint
552d9c4759b724618f9333a2cf7c686759b39ac6a3b856bb3f417760ab8de617