{
  "schema": "skillstore.package/v1",
  "id": "memory-analysis",
  "name": "Memory Analysis",
  "description": "Windows memory forensics workflow for SANS SIFT using Volatility 3 and Memory Baseliner.",
  "entry": "SKILL.md",
  "source": {
    "repository": "https://github.com/teamdfir/protocol-sift/tree/main/skills/memory-analysis",
    "author": "Rob Lee / teamdfir"
  },
  "tags": ["dfir", "memory-forensics", "volatility3", "sift"],
  "compatibility": ["SANS SIFT Workstation", "filesystem-capable AI agent"]
}