{"slug":"transilienceai-dfir","source_name":"transilienceai/dfir","name":"Transilienceai/Dfir","description":"Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation. Use when investigating security incidents, analyzing Sherlocks, or performing threat hunting on provided evidence files.","version":1,"lift":{"pass_rate_delta_pts":13.64,"pass_rate_pct":95.5,"total_cases":22,"passed_cases":21,"tokens_delta_pct":67.2,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-19T11:23:58.457568+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":13.64,"with_pass_pct":95.5,"without_pass_pct":81.8,"tokens_delta_pct":67.2,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-19T11:23:58.457568+00:00","run_id":"e467f278-8b16-4983-9f30-7007f2eaa769","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"dc0087b1e5a4a8070c0778589ef4b9da40134c9e87db2e30eac7c4d2dc1e9f86","raw_url":"https://app.decimal.ai/s/transilienceai-dfir/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/transilienceai-dfir"}