关于
This skill provides comprehensive guidance for agents tasked with extracting credentials from complex forensic environments and disk images. It facilitates a multi-phased approach that prioritizes structured recovery through specialized forensic tools like extundelete and debugfs before resorting to systematic byte-level fragment analysis. By emphasizing rigorous validation strategies—such as proximity checks, context verification, and format constraint matching—this skill ensures high-fidelity data recovery while helping users avoid common pitfalls like confirmation bias, premature conclusions, and improper handling of container formats.
