CyberHorizon-be/sleuthline
Windows DFIR pipeline: from a KAPE collection, a memory image and network captures to an evidence-backed incident response report, with an LLM agent.
GitHub repository with 11 stars and 2 forks.
Language: Python
Topics: dfir, duckdb, forensics, incident-response, kape, llm, memory-forensics, network-forensics, pcap, suricata