depalmar/ai-dfir-toolkit

A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider threats, and RAG/vector database attacks.

23Stars on the repository
2Mods indexed here, across every type
13d agoLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown

depalmar/ai-dfir-toolkit

Instructions file

Instructions for depalmar/ai-dfir-toolkit, covering project context, what this is, commands, rules that are not negotiable and what a restricted runner cannot verify.

not rated 23 13d ago A 6,013 tokens original Apache-2.0