Skip to main content
Glama
tejcodes-rex

VERDICT

by tejcodes-rex
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Related Servers

Alternatives to VERDICT

No user-submitted related servers found.

    Related Servers

    • SIFTGuard

      sodiq-code
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables autonomous digital forensics and incident response by wrapping SIFT Workstation tools as MCP tools and orchestrating a multi-agent AI pipeline for evidence analysis and remediation planning.
      2
      MIT

    • EvidenceGene Court

      FUYOH666
      A
      license
      B
      quality
      C
      maintenance
      Adversarial autonomous DFIR. A court of AI agents — Prosecutor, Defender, Arbiter — investigates disk and memory evidence through a typed, read-only MCP server.
      11
      1
      MIT

    • findevil-agent

      povfarwa
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables autonomous digital forensics and incident response through 21 typed forensic tools covering disk, memory, registry, network, timeline, carving, and patterns, integrated with AI-driven reasoning and self-correction.
      MIT

    • SIFTAgent

      abhishek2f24
      A
      license
      Not graded
      quality
      D
      maintenance
      An MCP server that transforms Claude Code into an autonomous DFIR analyst by providing typed, audited forensic tools for disk, memory, timeline, registry, and IOC analysis on the SANS SIFT Workstation.
      Apache 2.0

    • Veritas MCP

      balajinrrbgm
      A
      license
      Not graded
      quality
      D
      maintenance
      Enables AI agents to conduct evidence-grounded forensic triage of compromised hosts, with architectural safeguards against evidence spoliation and hallucinated findings, supporting self-correction and chain of custody.
      MIT

    • SIFT Kernel

      Sathvik-1007
      A
      license
      Not graded
      quality
      D
      maintenance
      MCP server that enforces forensic methodology and prevents hallucinations by requiring evidence links and deterministic verification, exposing 129 forensic operations across 14 categories with auto-correlation and reasoning engine.
      2
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.3/5.0

    Scored across 34 tools

    Disambiguation4/5

    Each tool targets a distinct forensic task (file system, memory, network, hypotheses, findings). Some overlap exists between mem_plugin and mem_vol2 for Volatility plugins, and between fs_registry and fs_shimcache (both registry-related), but descriptions clearly differentiate them.

    Naming Consistency4/5

    Tools follow a consistent domain_prefix naming pattern (e.g., fs_, mem_, network_). Within each domain, verb_noun patterns are used (finding_propose, hypothesis_add). Minor deviations like attack_map and super_timeline do not significantly harm predictability.

    Tool Count4/5

    34 tools is on the higher end, but each tool addresses a specific forensic need (file system, memory, network, YARA, reporting, etc.). The count is justified given the comprehensive coverage of DFIR workflows.

    Completeness4/5

    The tool surface covers major investigation phases: acquisition (case_open), file system analysis, memory analysis, network analysis, hypothesis management, findings, and reporting. Minor gaps exist (e.g., Windows event log parsing), but core workflows are well-supported.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues

    Resources