Why this repo matters
No release captured, 6 developer signals, 1 package/install signals

Autonomous DFIR agent driving SANS SIFT forensic tools via an MCP server + LangGraph, with guardrails and a hash-chained audit trail. (0 stars, 0 forks, 4 AI signals, 3 developer signals).