Armory
Source
Browse
MCPs

deepsift

DeepSIFT is an MCP server that wraps SANS SIFT Workstation forensic tools with structured JSON output and RAG threat intelligence, reducing LLM hallucinations in autonomous incident response.

Score
23.3741 signal
Evidence
1 fork
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. pare138 stars · 12 forks91.210
  2. joe-sandbox-cloud11 stars · 4 forks69.349
  3. ronieneubauer-cli2mcp12 stars58.290

What it is

DeepSIFT is an MCP server that wraps SANS SIFT Workstation forensic tools with structured JSON output and RAG threat intelligence, reducing LLM hallucinations in autonomous incident response.

When to use it

DeepSIFT is an MCP server that wraps SANS SIFT Workstation forensic tools with structured JSON output and RAG threat intelligence, reducing LLM hallucinations in autonomous incident response.

How to install / invoke

See Glama for the install config.

Notes

Listed from the Glama MCP registry.