1. Conduid
  2. RAG
  3. AI Dfir Toolkit
MCP server · RAG

AI Dfir Toolkit

by · github.com/depalmar/ai-dfir-toolkit

A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider threats, and RAG/vector database attacks.

Unclaimed ai-securitydetection-engineeringdfirforensicsincident-responsellm-securitymcpsigmathreat-hunting
InstallView source
39Low

Scored 14 days ago · breakdown

About AI Dfir Toolkit

AI Dfir Toolkit is an MCP server published by depalmar in the RAG category: a vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider threats, and RAG/vector database attacks.

The repository has 24 stars and 0 forks, with the last commit 2 months ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/depalmar/ai-dfir-toolkit

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about AI Dfir Toolkit

Powered by Claude · Grounded in docs

I know everything about AI Dfir Toolkit. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

artifacts-v1.1.0AI agent artifact catalog v1.1.0 · 13 Aug 2026[1.1.0] - 2026-08-13 Added KAPE targets and Velociraptor artifacts. `docs/api/kape/` (28 targets) and `docs/api/velociraptor/` (35 artifacts), both derived entirely from paths the catalog already verified. KAPE is Windows-only and…
artifacts-v1.0.0AI agent artifact catalog v1.0.0 · 11 Aug 2026
Questions

About AI Dfir Toolkit

How do I install AI Dfir Toolkit?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is AI Dfir Toolkit safe to use with an AI agent?

Its trust score is 39 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is AI Dfir Toolkit still maintained?

Yes — the latest release is artifacts-v1.1.0 (13 Aug 2026), and the last commit was 2 months ago. The repository has 24 stars.