samaritan0/dfir-agentic-suite

An autonomous Digital Forensics & Incident Response toolkit built on Claude's skill and MCP ecosystem

16Stars on the repository
10Mods indexed here, across every type
5mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied

dfir-threatintel

01

samaritan0/dfir-agentic-suite

MCP server Claude CodeCodexCursor +2

One of 4 in claude_desktop_config.json

MCP server "dfir-threatintel" as configured in samaritan0/dfir-agentic-suite. Runs dfir_threatintel_mcp with python3. Needs 5 environment variables to run.

not rated 16 5mo ago A tokens not measured

dfir-siem

02

samaritan0/dfir-agentic-suite

MCP server Claude CodeCodexCursor +2

One of 4 in claude_desktop_config.json

MCP server "dfir-siem" as configured in samaritan0/dfir-agentic-suite. Runs dfir_siem_mcp with python3. Needs 8 environment variables to run.

not rated 16 5mo ago A tokens not measured

dfir-case-mgmt

03

samaritan0/dfir-agentic-suite

MCP server Claude CodeCodexCursor +2

One of 4 in claude_desktop_config.json

MCP server "dfir-case-mgmt" as configured in samaritan0/dfir-agentic-suite. Runs dfir_case_mgmt_mcp with python3. Needs 5 environment variables to run.

not rated 16 5mo ago A tokens not measured

dfir-edr-response

04

samaritan0/dfir-agentic-suite

MCP server Claude CodeCodexCursor +2

One of 4 in claude_desktop_config.json

MCP server "dfir-edr-response" as configured in samaritan0/dfir-agentic-suite. Runs dfir_edr_response_mcp with python3. Needs 7 environment variables to run.

not rated 16 5mo ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: