home/categories/system-admin/mukul975-anthropic-cybersecurity-skills-skills-hunting-for-shadow-copy-deletion-skill-md
system-admintools

hunting-for-shadow-copy-deletion

Hunt for Volume Shadow Copy deletion activity that indicates ransomware preparation or anti-forensics by monitoring vssadmin, wmic, and PowerShell shadow copy commands.

mukul975
maintainer
mukul975
Обновлено 4/6/2026
Звёзды
4240
Форки
464
quick start

Installation and usage

Hunt for Volume Shadow Copy deletion activity that indicates ransomware preparation or anti-forensics by monitoring vssadmin, wmic, and PowerShell shadow copy commands.

Установка
$ install --globalskills.sh
Использование

После установки вы можете использовать этот skill, выполнив следующую команду в терминале:

skills use hunting-for-shadow-copy-deletion