Agentic DFIR
☆103Nov 7, 2026Updated this week
Alternatives and similar repositories for mulder
Users that are interested in mulder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response☆69Oct 30, 2026Updated last week
- A 'code-mode' MCP server that allows LLMs to safely generate and execute JavaScript code that performs forensic analysis and employs trad…☆41Updated this week
- A self-verifying autonomous DFIR analyst: read-only MCP forensic tools plus an adversarial Investigator/Skeptic self-correction loop.☆28Jun 10, 2026Updated 4 months ago
- DFIR system for FindEvil Hackathon Submission☆39Aug 24, 2026Updated 2 months ago
- Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal☆21Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Valhuntir CLI — AI-augmented incident response platform☆149Updated this week
- Your AI Assistant for Weekend Forensics☆39Updated this week
- MacOS forensic collector for Velociraptor. 70 artefacts covering browsers, communications, user activity, persistence, security, logs, fi…☆17May 26, 2026Updated 5 months ago
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆298Updated this week
- Forensic extractor for Claude Code and Claude Cowork local state — macOS/Windows captures☆27Jun 16, 2026Updated 4 months ago
- Monitors and curates cybersecurity-related repositories weekly (Thursday).☆18Updated this week
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- DLEAPP — Desktop Logs Events And Protobuf Parser. A LEAPP for triaging desktop-application artifacts (Electron/Chromium).☆34Updated this week
- Open-source desktop workbench for digital forensic analysis. Inspect ZIP/TAR/7z/UFDR archives, raw disk images/EWF, and iTunes/Android ba…☆109Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic ar…☆53Jun 13, 2026Updated 4 months ago
- A unified investigation cockpit built for CSIRT / SOC / DFIR teams. Ingest, correlate and visualise any forensic source in a real-time in…☆46Updated this week
- Volume Shadow Copy Explorer☆18Nov 23, 2025Updated 11 months ago
- Script that uses exiftool and c2pa to identify metadata tags that indicate AI generation☆15Dec 27, 2025Updated 10 months ago
- Get-NetScalerTimeline - Automated File System Timeline Creation for NetScaler ADC/Gateway (DFIR)☆15Oct 4, 2026Updated last month
- Your Browser-based EVTX Companion☆123Jul 21, 2026Updated 3 months ago
- Browse Windows Recycle Bin from E01 forensic images with Explorer-style interface. Parse $I/$R artifacts, view deleted files in original …☆18Dec 16, 2025Updated 10 months ago
- Windows Forensics Salt States☆23Updated this week
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆37Oct 14, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The SOLVE-IT knowledge base for digital forensics☆93Updated this week
- Multi-quarantine extractor☆59Mar 3, 2026Updated 8 months ago
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆43May 18, 2026Updated 5 months ago
- Disk Image Mounting Script☆14Jul 21, 2026Updated 3 months ago
- A comprehensive MCP server for Windows digital forensics on KALI Linux☆26Sep 29, 2026Updated last month
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated last year
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- Open-source memory forensics platform for DFIR, threat hunting, malware analysis, and incident response.☆31Oct 5, 2026Updated last month
- ☆10Feb 16, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CTI resources for Claude, maintained by Feedly☆38Oct 21, 2026Updated 2 weeks ago
- ☆14Feb 28, 2026Updated 8 months ago
- A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chain…☆159Updated this week
- Turn domain expertise into AI-accessible MCP servers☆18Oct 28, 2026Updated last week
- Random notes collected on the intertubes relating to DFIR☆40Jun 26, 2023Updated 3 years ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆61Updated this week
Are these results useful?