protocol-sift-agent

Autonomous AI incident response agent built on SANS SIFT Workstation. Custom MCP server wrapping key forensic tools as safe typed functions, with self-correcting AI triage agent. SANS Find Evil! Hackathon 2026.

{
  "mcpServers": {
    "protocol-sift-agent": {
      "command": "uvx",
      "args": [
        "protocol-sift-agent"
      ]
    }
  }
}

claude mcp add protocol-sift-agent uvx protocol-sift-agent

{
  "mcpServers": {
    "protocol-sift-agent": {
      "command": "uvx",
      "args": [
        "protocol-sift-agent"
      ]
    }
  }
}