Not in the top 1,000 by GitHub stars
tsale/awesome-dfir-skills
A curated collection of DFIR skills and workflows for InfoSec practitioners.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/_templates/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
6e52942c6273 → 6e52942c6273
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6e52942c6273
No earlier version was observed for comparison.
skills/analysis/admiralty-system-tr/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
6e52942c6273 → 6e52942c6273
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6e52942c6273
No earlier version was observed for comparison.
skills/analysis/analysing-attack-skill/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
6e52942c6273 → 6e52942c6273
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6e52942c6273
No earlier version was observed for comparison.
skills/analysis/malware-analysis-tr/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
6e52942c6273 → 6e52942c6273
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6e52942c6273
No earlier version was observed for comparison.
skills/analysis/threat-actor-profiling/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
6e52942c6273 → 6e52942c6273
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6e52942c6273
No earlier version was observed for comparison.
skills/analysis/windows-intrusion-timeline/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
6e52942c6273 → 6e52942c6273
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6e52942c6273
No earlier version was observed for comparison.
skills/hunting/osquery-helper/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
6e52942c6273 → 6e52942c6273
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6e52942c6273
No earlier version was observed for comparison.
skills/hunting/suspicious-powershell-hunt/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
6e52942c6273 → 6e52942c6273
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6e52942c6273
No earlier version was observed for comparison.
skills/triage/initial-incident-intake/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Not checked yet
6e52942c6273 → 6e52942c6273
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6e52942c6273
No earlier version was observed for comparison.
Heat
0.3- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
How it works
Skills included
Repository facts
- License
- Apache-2.0
- Created
- Dec 27, 2025
- Last pushed
- May 14, 2026
- Forks
- 35
- Open issues
- 0
- Project activity
- Not available
Before you install
Not checked yetAutomated signals, not a guarantee
No scan has been recorded for this repository yet.
