"author:Sidera-Labs" matching MCP servers:

Enables MCP clients to interact with a Velociraptor deployment for DFIR workflows, allowing VQL queries, client management, hunt creation, and artifact collection.

Enables digital forensics investigation by exposing SANS SIFT tools (The Sleuth Kit, Volatility 3, Plaso, etc.) as callable MCP tools, running in a self-contained Docker container with safe, allowlisted commands.