digital forensics hooks

7onez/cti-expert

Hook

Runs before the agent uses a tool for Write, Edit, NotebookEdit, Bash and mcp__.* tool calls, running python3 (2 commands). From 7onez/cti-expert.

7onez/cti-expert

Hook

Runs when a session starts, running python3. From 7onez/cti-expert.

kismatkunwar89/SAVVYDFIR-MCP

Hook Claude Code

Runs when a session starts, executing session-start.py. From kismatkunwar89/SAVVYDFIR-MCP.

kismatkunwar89/SAVVYDFIR-MCP

Hook Claude Code

Runs before the agent uses a tool for mcp__savvydfir__generate_report and mcp__savvydfir__record_analysis_lane tool calls, executing workflow-enforce-pre.py. From kismatkunwar89/SAVVYDFIR-MCP.

kismatkunwar89/SAVVYDFIR-MCP

Hook Claude Code

Runs after a tool call finishes for mcp__savvydfir__mount_image, mcp__savvydfir__extract_mft_timeline, mcp__savvydfir__extract_usn_journal, mcp__savvydfir__summarize_evtx, mcp__savvydfir__extract_prefetch, mcp__savvydfir__get_amcache, mcp__savvydfir__extract_shimcache, mcp__savvydfir__extract_registry_run_keys…

omeryemba/mcp-hayabusa

Hook Claude Code

Runs when a session starts, executing check-prereqs.sh. From omeryemba/mcp-hayabusa.

omeryemba/mcp-hayabusa

Hook Claude Code

Runs before the agent uses a tool, executing check-sensitive.sh. From omeryemba/mcp-hayabusa.

omeryemba/mcp-hayabusa

Hook Claude Code

Runs after a tool call finishes for Write, Edit, Write and Edit tool calls, executing log_modified_file.py and validate-rule.sh via python (2 commands). From omeryemba/mcp-hayabusa.