kismatkunwar89/SAVVYDFIR-MCP

AI-driven DFIR framework: an MCP server that turns Claude Code into an autonomous digital-forensics analyst on SANS SIFT - correlates disk + memory evidence, enforces a deterministic evidence-provenance gate, and produces auditable, hash-chained investigation reports.

This repository also configures its own agents. See what SAVVYDFIR-MCP tells them →

4Stars on the repository
26Mods indexed here, across every type
2mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

savvydfir

01

kismatkunwar89/SAVVYDFIR-MCP

MCP server Claude CodeCodexCursor +2

MCP server "savvydfir" as configured in kismatkunwar89/SAVVYDFIR-MCP. Runs sift_mcp.server with ./venv/bin/python3. Needs 4 environment variables to run.

not rated 4 2mo ago A tokens not measured original MIT