Drive EL through a GENUINE runtime self-correction on real evidence and narrate it, for the Find Evil demo / "Interaction with EL" walkthrough. Use when the user invokes /el-demo (optionally with a path to a memory image as the argument). EL ingests a Digital Corpora "2019 Narcos" memory image, Volatility 3 builds no kernel layer (the System DTB sits above the truncated 4 GB capture), EL detects this via a raw-byte ntoskrnl banner scan, names the Windows build, and RE-ROUTES the image to the carve pipeline instead of dead-ending — recording the correction as a first-class artifact. This skill runs that end-to-end and reports the before/after. Nothing is staged: the correction is driven by the image's physical structure and fires on every run.
Install with
Claude CodeCodexCursorGitHub CopilotGemini CLI
Supported by the Atlas install prompt. Skill-specific requirements vary.
Skill stats
Skills1CategoryGeneralStars0
About this skill
Drive EL through a GENUINE runtime self-correction on real evidence and narrate it, for the Find Evil demo / "Interaction with EL" walkthrough. Use when the user invokes /el-demo (optionally with a path to a memory image as the argument). EL ingests a Digital Corpora "2019 Narcos" memory image, Volatility 3 builds no kernel layer (the System DTB sits above the truncated 4 GB capture), EL detects this via a raw-byte ntoskrnl banner scan, names the Windows build, and RE-ROUTES the image to the carve pipeline instead of dead-ending — recording the correction as a first-class artifact. This skill runs that end-to-end and reports the before/after. Nothing is staged: the correction is driven by the image's physical structure and fires on every run.
Quick start
Copy the install prompt. Use the green button above this README.
Send it to your agent. Paste it into your coding agent’s chat and send.
Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Drive EL through a GENUINE runtime self-correction on real evidence and narrate it, for the Find Evil demo / "Interaction with EL" walkthrough. Use when the user invokes `/el-demo` (optionally with a path to a memory image as the argument). EL ingests a Digital Corpora "2019 Narcos" memory image, Volatility 3 builds no kernel layer (the System DTB sits above the truncated 4 GB capture), EL detects this via a raw-byte ntoskrnl banner scan, names the Windows build, and RE-ROUTES the image to the carve pipeline instead of dead-ending — recording the correction as a first-class artifact. This skill runs that end-to-end and reports the before/after. Nothing is staged: the correction is driven by the image's physical structure and fires on every run.
About this listing
Category
General
Reported license
Apache-2.0
Listing language (estimated)
English
Review status
Not individually reviewed
Agent compatibility
Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.