forensics hooks

alexgreensh/repo-forensics

Hook

Runs before the agent uses a tool for Bash tool calls, executing run_pre_scan.sh via bash. From alexgreensh/repo-forensics.

alexgreensh/repo-forensics

Hook

Runs after a tool call finishes for Bash tool calls, executing run_auto_scan.sh via bash. From alexgreensh/repo-forensics.

alexgreensh/repo-forensics

Hook

Runs when a session starts, executing run_session_scan.sh and first-run-nudge.sh via bash (2 commands). From alexgreensh/repo-forensics.

kismatkunwar89/SAVVYDFIR-MCP

Hook Claude Code

Runs when a session starts, executing session-start.py. From kismatkunwar89/SAVVYDFIR-MCP.

kismatkunwar89/SAVVYDFIR-MCP

Hook Claude Code

Runs before the agent uses a tool for mcp__savvydfir__generate_report and mcp__savvydfir__record_analysis_lane tool calls, executing workflow-enforce-pre.py. From kismatkunwar89/SAVVYDFIR-MCP.

kismatkunwar89/SAVVYDFIR-MCP

Hook Claude Code

Runs after a tool call finishes for mcp__savvydfir__mount_image, mcp__savvydfir__extract_mft_timeline, mcp__savvydfir__extract_usn_journal, mcp__savvydfir__summarize_evtx, mcp__savvydfir__extract_prefetch, mcp__savvydfir__get_amcache, mcp__savvydfir__extract_shimcache, mcp__savvydfir__extract_registry_run_keys…