{"repo":"FlipForensics/AIFT","free":true,"listed":false,"github":"https://github.com/FlipForensics/AIFT","clone":"git clone https://github.com/FlipForensics/AIFT.git","description":"AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic archives, or triage packages; AIFT discovers what can be opened, parses artifacts with Dissect, and uses AI to turn parsed data into concrete leads and gaps for the investigator to verify.","language":"Python","stars":41,"topics":["ai","chatgpt","claude","dfir","dfir-automation","dfir-tools","digital-forensics","forensics","forensics-tools","incident-response"],"license":"AGPL-3.0","category":"cli-tools","readme_excerpt":"AIFT - AI Forensic Triage V2.0 Automated Windows and Linux forensic triage, powered by AI. AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic archives, or triage packages; AIFT discovers what can be opened, parses artifacts with Dissect, and uses AI to turn parsed data into evidence-linked leads, timelines, correlations, questions, and gaps for the investigator to verify. Go from evidence to actionable results in under an hour. AIFT has a GUI that even non-DFIR team members can operate. It also has CLI, REST API, and optional MCP modes for repeatable runs, integrations, or AI-client-driven automation. No Elasticsearch. No Docker. No database. One local Python application. AIFT is under active development. Contributions, bug reports, workflow feedback, and forensic reality checks are welcome. --- How It Works 1. Run the app - a local web interface opens in your browser. 2. Add evidence - drag and drop an E01, VMDK, VHD, raw image, archive, or triage package; point to a local path for large evidence; or use Scan Directory to find supported targets inside a folder. 3. Select artifacts - choose parseable Windows or Linux artifacts manually, use recommended selections, or load an artifact profile. 4. Parse and triage - AIFT parses the selected artifacts, sends the parsed data to your configured AI provider, and produces evidence-linked leads for review. 5. Review and follow up - download the HTML/J","default_branch":null,"files":null,"tree":[],"storefront":"/r/FlipForensics","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/FlipForensics/AIFT/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}