siftguard

sodiq-code/siftguard
★ 1 stars Python AI/LLM Updated 3d ago
SIFTGuard — Autonomous Multi-Agent Forensic Investigation System for FIND EVIL! 2025 Hackathon. MCP Server + 5-Agent Pipeline + Self-Correction + HITL.
View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "siftguard": {
      "command": "uvx",
      "args": [
        "siftguard"
      ]
    }
  }
}

Or install with pip: pip install siftguard

README Excerpt

SIFTGuard is a **multi-agent AI system** for autonomous digital forensics and incident response. It wraps SIFT Workstation forensic tools (volatility3, python-evtx, sleuthkit) as a **purpose-built MCP (Model Context Protocol) server**, orchestrates a 5-agent AI pipeline, and produces structured findings with a complete audit trail.

Tools (8)

build_timelinecheck_mitreextract_iocsparse_evtxrecord_findingrun_sleuthkitrun_volatilitysearch_playbook