mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-07-24 05:30:58 +03:00

Files

T

mukul975 27c6414ca5 Add folder anatomy (scripts/agent.py + references/api-reference.md) for 648 cybersecurity skills

Complete skill folder anatomy across all cybersecurity skills:
- scripts/agent.py: 80-150 line Python agents using real libraries (impacket,
  boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.)
- references/api-reference.md: real API documentation with method signatures
- LICENSE: MIT license for all skill folders

2026-03-10 21:02:12 +01:00

2.0 KiB

Raw Blame History

API Reference: Recovering Deleted Files with PhotoRec Agent

Overview

Wraps PhotoRec via subprocess for forensic file recovery from disk images, with automated file cataloging, SHA-256 hashing for evidence integrity, and categorized sorting.

Dependencies

Package	Version	Purpose
hashlib	stdlib	SHA-256 hashing for evidence integrity
subprocess	stdlib	PhotoRec command execution
pathlib	stdlib	File extension handling

External Tools Required

Tool	Purpose
photorec	File carving and recovery from disk images
file	File type identification

Core Functions

`run_photorec(image_path, output_dir, file_types, partition)`

Executes PhotoRec with optional file type filtering and partition selection.

Timeout: 14400 seconds (4 hours)
Returns: dict with command, returncode, output_dir

`catalog_recovered_files(output_dir)`

Catalogs all recovered files by extension with counts and sizes.

Returns: dict with total_files, total_mb, by_extension

`hash_recovered_files(output_dir, extensions)`

Generates SHA-256 hashes for recovered files, optionally filtered by extension.

Returns: list[dict] with file path, sha256, size

`sort_recovered_files(output_dir, sorted_dir)`

Sorts recovered files into categories: documents, images, databases, archives, executables, email, web, other.

Returns: dict[str, int] - category to file count

`full_recovery_pipeline(image_path, output_dir, file_types)`

End-to-end: image info -> PhotoRec recovery -> catalog -> sort.

File Categories

Category	Extensions
documents	.doc, .docx, .pdf, .xls, .xlsx, .ppt, .txt, .csv
images	.jpg, .png, .gif, .bmp, .tiff, .svg
databases	.db, .sqlite, .mdb, .sql
archives	.zip, .rar, .7z, .tar, .gz
executables	.exe, .dll, .bat, .ps1, .sh
email	.eml, .msg, .pst, .ost

Usage

python agent.py /cases/evidence.dd /cases/recovered/ jpg,pdf,doc

2.0 KiB Raw Blame History