Does this skill require external software?

Yes, this skill provides the patterns and commands to interact with tools like MVT, ExifTool, YARA, and DuckDB, which should be installed on your environment.

Can this skill detect Pegasus spyware?

Yes, it incorporates methodologies and YARA rules from the Pegasus Project to identify indicators of compromise on mobile devices.

What is the Citizen Lab Forensics skill?

It is a specialized capability for Claude that provides domain-specific guidance and implementation patterns for digital forensics, focusing on detecting targeted surveillance.

Which mobile platforms are supported?

The skill supports forensic analysis for both iOS (via backup analysis) and Android (via APK and system analysis) using the Mobile Verification Toolkit.

Citizen Lab Digital Forensics

Name: Citizen Lab Digital Forensics
Author: plurigrid

byplurigrid

•

安全与测试

Performs advanced digital forensics and malware analysis to detect targeted surveillance and device compromise.

The Citizen Lab Digital Forensics skill integrates industry-standard methodologies from organizations like Citizen Lab and Amnesty Tech into your development and investigation workflow. It enables the detection of sophisticated spyware such as Pegasus and Predator by providing pre-configured commands for the Mobile Verification Toolkit (MVT), YARA rule scanning, and deep metadata extraction with ExifTool. Whether you are an investigative journalist, a human rights defender, or a security researcher, this skill streamlines the process of analyzing mobile backups, documents, and network infrastructure for signs of targeted attacks.

主要功能

01Support for standardized IOC formats including STIX 2.1 and MISP

02Deep metadata extraction and sanitization using ExifTool

03Automated malware detection via YARA rules for known spyware patterns

04Network forensics tools for DNS cache probing and certificate pivoting

058 GitHub stars

06Mobile Verification Toolkit (MVT) integration for iOS and Android analysis

使用场景

01Processing large document sets to extract and audit forensic metadata

02Analyzing mobile device backups for indicators of Pegasus or Predator spyware

03Investigating suspicious network infrastructure using passive DNS and SSL certificate mapping

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add plurigrid/asi citizen-lab-forensics

For use in Claude.ai and ChatGPT

Download Skill