home/categories/astronomy-physics/fuzzdkk-dfir-skills-disk-forensics-skill-md
astronomy-physicsresearch

disk-forensics

Analyze disk images and filesystem artifacts using Sleuthkit (mmls, fls, icat), binwalk, strings, and bulk_extractor. Recover deleted files, build timelines, and examine partition structures.

Fuzzdkk
maintainer
Fuzzdkk
Updated 4/10/2026
Stars
2
Forks
0
quick start

Installation and usage

Analyze disk images and filesystem artifacts using Sleuthkit (mmls, fls, icat), binwalk, strings, and bulk_extractor. Recover deleted files, build timelines, and examine partition structures.

Installation
$ install --globalskills.sh
Usage

Once installed, you can use this skill by running the following command in your terminal:

skills use disk-forensics