Analyzing Browser Forensics With Hindsight
Turn browser profile forensic review into a standardized report covering visits, downloads, credentials, and cookies.
Overview
Analyzing Browser Forensics with Hindsight is an agent skill for the Ship phase that produces structured browser forensics reports from profile examination results.
Install
npx skills add https://github.com/mukul975/anthropic-cybersecurity-skills --skill analyzing-browser-forensics-with-hindsightWhat is this skill?
- Case info block for case number, browser type, and profile path
- Activity summary metrics for URL visits, downloads, saved passwords, and cookies
- Notable URLs table with timestamp, URL, and page title
- Downloads table with source URL, file name, size, and timestamp
- Apache 2.0 licensed report scaffold for Hindsight-style browser reviews
- Activity summary tracks four metrics: URL visits, downloads, saved passwords, and cookies
Adoption & trust: 1 installs on skills.sh; 14.9k GitHub stars; 0/3 security scanners passed (skills.sh audits); trending (+100% hot-view momentum).
What problem does it solve?
You finished browser artifact review but lack a uniform report that quantifies visits, downloads, credentials, and high-risk URLs in one place.
Who is it for?
DFIR workflows where browser history, downloads, and stored credentials must be summarized after Hindsight or equivalent parsing.
Skip if: Growth-stage founders who only want product analytics funnels or SEO crawl data from production sites.
When should I use this skill?
You need a Browser Forensics Report after examining a browser profile with Hindsight or comparable artifact review.
What do I get? / Deliverables
You receive a browser forensics report with populated activity metrics, notable URL and download tables, and case metadata suitable for IR documentation.
- Browser Forensics Report with activity summary, notable URLs, and downloads tables
Recommended Skills
Journey fit
Browser forensics supports Ship security when investigating compromised workstations or insider activity tied to shipped internal tools and admin browsers. Security is the right subphase because the output is an investigative deliverable, not marketing analytics or product growth instrumentation.
How it compares
Treat it as an investigation write-up template, not a live browser automation or marketing analytics skill.
Common Questions / FAQ
Who is analyzing-browser-forensics-with-hindsight for?
It is for incident responders, forensic analysts, and security-minded solo consultants documenting browser profile evidence after extraction or tooling review.
When should I use analyzing-browser-forensics-with-hindsight?
Use it in Ship security reviews when you are drafting a browser forensics report—for example after employee offboarding investigations, malware triage on a dev machine, or validating suspicious downloads before a production credential rotation.
Is analyzing-browser-forensics-with-hindsight safe to install?
The skill is a documentation scaffold; confirm authorization for the data you analyze and check the Security Audits panel on this page before piping real profile dumps into an agent.
SKILL.md
READMESKILL.md - Analyzing Browser Forensics With Hindsight
# Browser Forensics Report ## Case Info | Field | Value | |-------|-------| | Case Number | | | Browser | | | Profile Path | | ## Activity Summary | Metric | Count | |--------|-------| | URL Visits | | | Downloads | | | Saved Passwords | | | Cookies | | ## Notable URLs | Timestamp | URL | Title | |-----------|-----|-------| | | | | ## Downloads | Timestamp | File | Source URL | Size | |-----------|------|-----------|------| | | | | | Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to the Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by the Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the