A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider threats, and RAG/vector database attacks.
Latest release artifacts-v1.1.0 — AI agent artifact catalog v1.1.0 · 13 Aug 2026
1 file for Claude Code: ai-dfir-toolkit CLAUDE.md — 7,802 tokens loaded in every session.
CLAUDE.md A 7,802 tok These files are depalmar/ai-dfir-toolkit's own configuration — they tell Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.