TimothyVang/verdict-dfir

VERDICT — a DFIR agent (Claude Code as the engine) that produces a signed, offline-verifiable verdict. SANS Find Evil! 2026.

Latest release v0.5.0 · 9 Jul 2026

6 files for Claude Code, Codex and OpenCode: PreToolUse, verdict-dfir, dev-loop, verdict and 2 more — 8,726 tokens loaded in every session.

Open on GitHub

Instructions

verdict-dfir AGENTS.md AGENTS.md A 3,098 tok
verdict-dfir CLAUDE.md CLAUDE.md A 5,628 tok

Settings

verdict-dfir .claude/settings.json A —

Hooks

PreToolUse .claude/settings.json A —

Skills

dev-loop .claude/skills/dev-loop/SKILL.md A 204 tok
verdict .claude/skills/verdict/SKILL.md A 78 tok

These files are TimothyVang/verdict-dfir's own configuration — they tell Claude Code, Codex and OpenCode how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.