sift-mcp-server

Autonomous DFIR agent for SANS SIFT Workstation — custom MCP server with typed, read-only forensic tool wrappers and a self-correcting triage loop. Built for the Find Evil! hackathon.

{
  "mcpServers": {
    "sift-mcp-server": {
      "command": "uvx",
      "args": [
        "sift-mcp-server"
      ]
    }
  }
}

claude mcp add sift-mcp-server uvx sift-mcp-server

{
  "mcpServers": {
    "sift-mcp-server": {
      "command": "uvx",
      "args": [
        "sift-mcp-server"
      ]
    }
  }
}