Command
Drain TRUDI live-monitoring alerts and run a per-tick investigation over the bundle.
52 5d ago A 17 tokens
original MIT
Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response
Command
Drain TRUDI live-monitoring alerts and run a per-tick investigation over the bundle.
Command
Clear a TRUDI case for a fresh run — preview everything, confirm, then wipe outputs + project memory (and live monitoring state).
Command
Start the TRUDI live-monitoring watcher (baseline + detectors + sidecar) for a case.
Command
Stop the TRUDI live-monitoring watcher(s) for a case (SIGTERM sidecar, clear event table).
Command
Event-driven TRUDI live-monitoring loop — wake on a new alert within seconds (no 60s /loop floor) and auto-respond.