{
  "schema": "skillstore.package/v1",
  "id": "windows-artifacts",
  "name": "Windows Artifact Analysis",
  "description": "Windows host artifact analysis with EZ Tools, registry, MFT/USN, execution artifacts, persistence and EVTX correlation.",
  "entry": "SKILL.md",
  "source": {
    "repository": "https://github.com/teamdfir/protocol-sift/tree/main/skills/windows-artifacts",
    "author": "Rob Lee / teamdfir"
  },
  "tags": ["dfir", "windows", "ezt-tools", "evtx", "registry", "mft", "sift"],
  "compatibility": ["SANS SIFT Workstation", "filesystem-capable AI agent"]
}