#dfir

Analyst AI Pack

An open agent-skills library for malware analysis, reverse engineering, and threat hunting - 118 curated, runnable skills mapped to MITRE AT...

Mulder

Agentic DFIR

Sift MCP

Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal

Valhuntir

Valhuntir CLI — AI-augmented incident response platform

Malware Sandbox MCP

Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhau...

Verdict Dfir

VERDICT — a DFIR agent (Claude Code as the engine) that produces a signed, offline-verifiable verdict. SANS Find Evil! 2026.

Spoor

Autonomous DFIR agent driving SANS SIFT forensic tools via an MCP server + LangGraph, with guardrails and a hash-chained audit trail.