Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response
☆69Oct 30, 2026Updated last week
Alternatives and similar repositories for trudi
Users that are interested in trudi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A 'code-mode' MCP server that allows LLMs to safely generate and execute JavaScript code that performs forensic analysis and employs trad…☆41Updated this week
- A self-verifying autonomous DFIR analyst: read-only MCP forensic tools plus an adversarial Investigator/Skeptic self-correction loop.☆28Jun 10, 2026Updated 5 months ago
- Agentic DFIR☆103Updated this week
- DFIR system for FindEvil Hackathon Submission☆39Aug 24, 2026Updated 2 months ago
- Script that uses exiftool and c2pa to identify metadata tags that indicate AI generation☆15Dec 27, 2025Updated 10 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated last year
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- Disk Image Mounting Script☆14Jul 21, 2026Updated 3 months ago
- Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal☆21Updated this week
- A repository of output using KAPE (!EZParser Module) for various publicly available forensic images!☆18Aug 31, 2024Updated 2 years ago
- Valhuntir CLI — AI-augmented incident response platform☆149Updated this week
- ☆25Mar 12, 2025Updated last year
- Native sigma scanner for Linux logs☆17Updated this week
- Forensic extractor for Claude Code and Claude Cowork local state — macOS/Windows captures☆27Jun 16, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Contains compiled binaries of Volatility☆37Oct 19, 2026Updated 3 weeks ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆20Updated this week
- StickyParser - Sticky Notes Forensic. A Windows Sticky Notes Praser (snt and plum.sqlite supported). Additional Feature: SQLite Recovery …☆24Jul 18, 2023Updated 3 years ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- Get-NetScalerTimeline - Automated File System Timeline Creation for NetScaler ADC/Gateway (DFIR)☆15Oct 4, 2026Updated last month
- A lightweight tool to view, search and analyze registry hives☆21Oct 28, 2026Updated last week
- DFIR forensics companion server + capture extension☆36Updated this week
- Windows Forensics Salt States☆23Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Repo to hold mcp server for velociraptor☆43Oct 11, 2026Updated 3 weeks ago
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- Capture. Detonate. Collect☆14Sep 20, 2024Updated 2 years ago
- A YARA & Malware Analysis Toolkit written in Rust.☆122Updated this week
- A series of python scripts to extract information from SQLite Data Files☆23Nov 15, 2025Updated 11 months ago
- PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.☆13Aug 26, 2024Updated 2 years ago
- Vault of Windows Registry forensic artifacts☆33Nov 12, 2025Updated 11 months ago
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆43May 18, 2026Updated 5 months ago
- Rust DFIR tool that massively parses cross-platform evidence, even deleted logs, into a lateral movement timeline and graph database.☆33Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆298Updated this week
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- ☆24Sep 7, 2026Updated 2 months ago
- A tool for fetching DFIR and other GitHub tools.☆32Updated this week
- Takajō (鷹匠) is a Hayabusa results analyzer.☆168Oct 25, 2026Updated 2 weeks ago
- CTI resources for Claude, maintained by Feedly☆38Oct 21, 2026Updated 2 weeks ago
- Create a MS Word index file from PowerPoint notes and slides☆46Sep 6, 2025Updated last year
Are these results useful?