mukul975/Anthropic-Cybersecurity-Skills

analyzing-browser-forensics-with-hindsight

Parse Chromium-based browser databases with Hindsight to extract and correlate browsing history, downloads, cookies, cached content, autofill data, saved passwords, and extensions from Chrome, Edge, Brave, Opera, and Vivaldi into a unified timeline (XLSX, JSON, or SQLite output). Use during incident response, insider-threat investigations, or criminal cases when you need to reconstruct a user's web activity from a browser profile.

581 installs 35K stars

Before you install

Last update
Files in folder
8
Scripts
Contains scripts. Review them before running.
SKILL.md size
11 KB (about 2,776 tokens of context each time it loads)
License
Apache-2.0

Skills are plain text instructions the agent follows, sometimes with scripts. Check the source, prefer repositories with many installs and stars, and read any script it ships.

Install

npx skills add mukul975/Anthropic-Cybersecurity-Skills@analyzing-browser-forensics-with-hindsight

Runs in a terminal with Node.js 18 or newer. Add -y to skip the prompts and -g to install for every project instead of this one.

Install for your agent

npx skills add mukul975/Anthropic-Cybersecurity-Skills@analyzing-browser-forensics-with-hindsight --agent claude-code -y
Project install writes to
.claude/skills/analyzing-browser-forensics-with-hindsight
Global install writes to
~/.claude/skills/analyzing-browser-forensics-with-hindsight

Start a new session afterwards so the agent picks the skill up. In Claude Code you can also call it directly with /analyzing-browser-forensics-with-hindsight.

What it does

Analyzing Browser Forensics with Hindsight Overview Hindsight is an open-source browser forensics tool designed to parse artifacts from Google Chrome and other Chromium-based browsers (Microsoft Edge, Brave, Opera, Vivaldi). It extracts and correlates data from multiple browser database files to create a unified timeline of web activity. Hindsight can parse URLs, download history, cache records, bookmarks, autofill records, saved passwords, preferences, browser extensions, HTTP cookies, Local Storage (HTML5 cookies), login data, and session/tab information. The tool produces chronological…

Excerpt from the skill's own SKILL.md. Read the full file on GitHub before installing: skills run with your agent's permissions.

Categories

Related skills

  • analyzing-api-gateway-access-logs

    mukul975/Anthropic-Cybersecurity-Skills

    Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect

    744 installs 35K scriptsTestingSecurityDeploy & DevOps
  • acquiring-disk-image-with-dd-and-dcfldd

    mukul975/Anthropic-Cybersecurity-Skills

    Create forensically sound bit-for-bit disk images with dd or dcfldd on a Linux forensic workstation, preserving evidence integrity through hash verification (MD5/SHA) during acquisition. Use when imaging a suspect drive, USB device, or memory card for investigation, preserving volatile disk evidence during incident response, or producing a verified copy for legal or law-enforcement proceedings before any destructive analysis.

    664 installs 35K scripts
  • analyzing-android-malware-with-apktool

    mukul975/Anthropic-Cybersecurity-Skills

    Perform static analysis of Android APK malware using apktool for resource decompilation, jadx for Java source recovery, and androguard for manifest inspection, dangerous permission-combination detection, and identification of obfuscated code, dynamic code loading, and reflection-based API calls. Use to statically triage a suspicious APK without executing it or to build mobile malware detection rules.

    656 installs 35K scriptsSecurityMobile
  • analyzing-email-headers-for-phishing-investigation

    mukul975/Anthropic-Cybersecurity-Skills

    Parse and analyze email headers (Received chain, Return-Path, Message-ID)

    604 installs 35K scripts
  • analyzing-cyber-kill-chain

    mukul975/Anthropic-Cybersecurity-Skills

    Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain

    600 installs 35K scripts
  • analyzing-docker-container-forensics

    mukul975/Anthropic-Cybersecurity-Skills

    Investigate compromised Docker containers by analyzing images, layers,

    575 installs 35K scriptsDeploy & DevOps

← Search skills

/skills/mukul975/Anthropic-Cybersecurity-Skills/analyzing-browser-forensics-with-hindsight/