# _templates

> > **Role**: You are a DFIR analyst. > > **Task**: > > **Constraints**: > - If you aren’t sure, say so and ask for the missing artifact. > - Don’t hallucinate hostnames/users/paths. > - Keep a clear chain of evidence and timestamp assumptions. > > **Provided artifacts**: > - > > **Deliverables**: > -

- Author: Thomas Roccia
- Repository: tsale/awesome-dfir-skills
- Version: 20260118162736
- Stars: 250
- Forks: 0
- Last Updated: 2026-02-07
- Source: https://github.com/tsale/awesome-dfir-skills
- Web: https://mule.run/skillshub/@@tsale/awesome-dfir-skills~_templates:20260118162736