occamzrazor342

Sherlock Agent — Development agent for Claude Code

Development community

Use this agent when working an HTB Sherlock (a DFIR/forensics investigation challenge — download an evidence archive, answer a set of text-answer questions about an incident).

How to install Sherlock Agent

Installs to ~/.claude/agents/occamzrazor342-pwnbox-harness-sherlock-agent.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/occamzrazor342/pwnbox-harness/HEAD/agents/sherlock-agent.md -o ~/.claude/agents/occamzrazor342-pwnbox-harness-sherlock-agent.md

Restart Claude Code, or start a new session, for it to be picked up.

What Sherlock Agent does

name: sherlock-agent description: Use this agent when working an HTB Sherlock (a DFIR/forensics investigation challenge — download an evidence archive, answer a set of text-answer questions about an incident). Not part of the pwn-box machine pipeline — Sherlocks have no recon/foothold/privesc/root phases, just one evidence archive and a task list. Typical triggers include "solve sherlock ", "work the sherlock", "what's the answer for task N on ", and "write up " once

Alternatives in Development

Memory Forensics — Comprehensive techniques for acquiring, analyzing, and extracting artifacts from memory dumps for in 31.9k ★
OSS Investigator Gh Archive Agent 2.3k ★
Fable Orchestrator — Staged-execution orchestrator for large, multi-part, or multi-session tasks 837 ★