Autonomous forensic investigation agent with self-correction for SANS SIFT Workstation. 21 typed MCP tools, 7 contradiction detectors, evidence-weighted confidence scoring. Built for SANS Find Evil! Hackathon.
A governed Model Context Protocol server for digital-forensics and incident-response work: HMAC-sealed audit, read-only evidence policy, 30+ tool wrappers.
Add a description, image, and links to the sans-hackathon topic page so that developers can more easily learn about it.
To associate your repository with the sans-hackathon topic, visit your repo's landing page and select "manage topics."