Does it handle attachment analysis?

Yes, it can extract attachments, identify file types, calculate MD5/SHA256 hashes, and check for malicious indicators like double extensions or embedded macros.

How does it help with large mailbox investigations?

It can generate comprehensive communication timelines, reconstruct fragmented email threads, and search across thousands of messages for specific keywords or metadata.

Which mailbox formats does the Email Forensics skill support?

The skill supports a wide range of formats including Outlook PST and OST files, MBOX, EML, and MSG formats.

Can this skill identify email spoofing?

Yes, it performs deep header analysis and checks SPF, DKIM, and DMARC results to identify impersonation and spoofing attempts.

Email Forensics

Name: Email Forensics
Author: SherifEldeeb

bySherifEldeeb

•

セキュリティとテスト

Analyzes email messages and mailbox archives to investigate phishing, business email compromise, and security threats.

The Email Forensics skill provides a comprehensive suite for forensic investigation of email data, supporting major formats including PST, OST, MBOX, EML, and MSG. It enables security professionals to perform deep header analysis, verify authentication protocols like SPF/DKIM/DMARC, and detect sophisticated phishing or spoofing attempts. Beyond simple parsing, the skill allows for automated attachment extraction, communication timeline generation, and complex thread reconstruction, making it an essential tool for digital forensics and incident response (DFIR) workflows.

主な機能

01Forensic attachment extraction with hash calculation and metadata analysis

02Automated phishing, spoofing, and social engineering detection

031 GitHub stars

04Deep header analysis and routing path visualization

05Communication timeline generation and email thread reconstruction

06Multi-format mailbox parsing (PST, OST, MBOX, EML, MSG)

ユースケース

01Investigating Phishing and Business Email Compromise (BEC) attacks

02Auditing email authentication and detecting header anomalies

03Performing digital discovery and internal investigations on archived mailboxes

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sherifeldeeb/agentskills forensics

For use in Claude.ai and ChatGPT

Download Skill