A self-verifying autonomous DFIR analyst: read-only MCP forensic tools plus an adversarial Investigator/Skeptic self-correction loop.
☆27Jun 10, 2026Updated 4 months ago
Alternatives and similar repositories for protocol-siftpp
Users that are interested in protocol-siftpp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- DFIR system for FindEvil Hackathon Submission☆37Aug 24, 2026Updated last month
- A 'code-mode' MCP server that allows LLMs to safely generate and execute JavaScript code that performs forensic analysis and employs trad…☆38Aug 27, 2026Updated last month
- Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response☆67Oct 3, 2026Updated 2 weeks ago
- Agentic DFIR☆93Updated this week
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆287Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Parser for Windows Scheduled Task files.☆13Apr 26, 2023Updated 3 years ago
- Random notes collected on the intertubes relating to DFIR☆40Jun 26, 2023Updated 3 years ago
- Utility tool to ingest CSV files into Kusto☆21Dec 17, 2025Updated 10 months ago
- Repo to hold mcp server for velociraptor☆41Oct 11, 2026Updated last week
- Mishky's AD Range & The Escalation Path from Hell, Version 1.1☆13May 7, 2025Updated last year
- Some resources to facilitate my blog on auditd for security monitoring☆13Mar 23, 2023Updated 3 years ago
- Indices for courses in SANS' Network Security Operations curriculum☆17Feb 5, 2016Updated 10 years ago
- A declarative, self-hosted containerised tool for visualising and managing home lab & network architecture diagrams.☆19Jul 24, 2026Updated 2 months ago
- DFIR forensics companion server + capture extension☆32Oct 14, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows Forensics Salt States☆23Updated this week
- Open-source desktop workbench for digital forensic analysis. Inspect ZIP/TAR/7z/UFDR archives, raw disk images/EWF, and iTunes/Android ba…☆103Updated this week
- Python web app for previewing data in a Chrome Profile Folder☆28Jul 1, 2024Updated 2 years ago
- Tracker blocking lists based on the DuckDuckGo Tracker Radar provided in the popular EasyList format and thus suitable for inclusion in e…☆13May 17, 2022Updated 4 years ago
- Adds an IP Address feed (CIDR) into Check Point Objects via a URL☆12May 22, 2020Updated 6 years ago
- ☆10Nov 30, 2020Updated 5 years ago
- Valhuntir CLI — AI-augmented incident response platform☆140Updated this week
- ☆10Aug 11, 2025Updated last year
- Dork Search Files☆14Feb 15, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A graphing toolkit for threat research - and other things☆20Mar 21, 2026Updated 7 months ago
- Bring runZero Exposure Management into BloodHound☆53Aug 9, 2026Updated 2 months ago
- The ultimate repository for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.☆26Aug 12, 2025Updated last year
- RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…☆37Apr 6, 2022Updated 4 years ago
- iPBA, Qt version☆10May 5, 2014Updated 12 years ago
- Presentations from yours truely☆28Sep 11, 2026Updated last month
- Refreshing Device Bound Session Credentials (DBSC) with Chromiums session store and the Windows CNG API☆30Jul 25, 2026Updated 2 months ago
- A command-line tool to mount SMB shares and scan them for secrets using NoseyParker.☆36Sep 23, 2026Updated last month
- I'm learning thm☆15Dec 18, 2021Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆45Jul 3, 2025Updated last year
- PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.☆13Aug 26, 2024Updated 2 years ago
- Audit, review, and clean up your Claude Code standing permissions.☆45Aug 17, 2026Updated 2 months ago
- Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing☆56May 18, 2019Updated 7 years ago
- Windows Ransomware Detection and Protection, Published by Packt☆11Mar 18, 2023Updated 3 years ago
- Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain …☆31Sep 21, 2026Updated last month
- This operational dashboard correlates data from Microsoft Defender for Endpoint/Server (MDE) and Azure Monitor Agent (AMA) to identify co…☆19Oct 7, 2026Updated 2 weeks ago