#dfir
GitHub repositories that have self-applied the topic "dfir" — a creator-tagged metadata that surfaces how AI projects describe themselves.
REPOS Repos for #dfir (top 4 by stars)
VERDICT — a DFIR agent (Claude Code as the engine) that produces a signed, offline-verifiable verdict. SANS Find Evil! 2026.
itsbotandme/dfir-attck-ctfsBrowser-playable DFIR CTF labs organised by MITRE ATT&CK Enterprise tactics. Self-contained HTML, no agent required at runtime.
EvilFreelancer/secsSECS (SECurity aSsistant) turns an AI coding agent (Claude Code, Cursor, Codex) into an authorized information-security assistant - 35 security Agent Skills, a Debian/Ubuntu/Kali toolchain installer, and a local Metasploitable 3 practice lab, under strict rules of engagement.
WooYoungSang/warvis-findEvilW.A.R.V.I.S. — Forensic IR agent (Go orchestrator + Python MCP + Gemma 4). SANS FIND EVIL hackathon entry by WoopsFactory.
RELATED Other topics · full topics ranking →
#claude-code
1,564#ai-agents
1,160#llm
1,071#claude
943#python
806#ai
741#developer-tools
728#mcp
727#codex
521Aggregated by case-insensitive match against topics_json of each repo's latest content snapshot. methodology