evil-sift-workbench

TheodorNEngoy/evil-sift-workbench
★ 0 stars Python AI/LLM Updated 3d ago
FIND EVIL Custom MCP Server workflow for evidence-integrity DFIR triage
View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "evil-sift-workbench": {
      "command": "uvx",
      "args": [
        "evil-sift-workbench"
      ]
    }
  }
}

Or install with pip: pip install evil-sift-workbench

README Excerpt

Evil Sift Workbench is a **Custom MCP Server** pattern for FIND EVIL 2026: Claude Code or OpenClaw can orchestrate triage through the `triage_jsonl` MCP tool, while a deterministic evidence-integrity core makes the final calls. The agent decides what to investigate and performs the self-correction sequence; the core refuses unsupported findings, sanitizes hostile log text, and emits traceable artifacts.