calebevans / mulder
Agentic DFIR
Why this job: works in the areas we cover, but does not say which job it does

What it does
Three models on the NIST CFReDS Data Leakage Case on the v1.5.2 release image, with the same evidence, prompts and tools. Each is scored item by item against the published NIST answer key (20 ground-truth items; full match = the exact fact stated, detection = at least related evidence found, false positives = claims the answer key contradicts). Every report, log and scorecard is in the repo, unmodified from tool output.
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 2 days ago
- Stars
- 105
- +4 this week
- Licence
- Apache-2.0
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- v1.5.10
- Released 11 days ago
- Built with
- Python
- 95% of the code
Is it looked after?
- Contributors
- 8
- Last 90 days
- Issues
- 97% closed
- 2 still open
- Pull requests
- 189 merged
- 0 waiting
- Releases
- 20
- 21 in the last year
- No contributing guide
- Security policy (opens in new tab)
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| Vigil-SOC / vigil | 432 | today | Apache-2.0 | No downloads |
| dandye / ai-runbooks | 133 | 3 months ago | Apache-2.0 | No downloads |
More: languages, topics and project record
Languages
- Python 95%
- Jinja 4%
- Dockerfile 1%
- Shell <1%
Topics
- ai
- ai-agents
- claude-code
- dfir
- digital-forensics
- forensics
- incident-response
- mcp
- sans-sift
- threat-hunting
Project record
- JobOther AI tools
- StatusListed
- Commits725
- Forks24
- Watching3
- Stars in 28 days+15
- CreatedApr 8, 2026
- First seen by usNov 7, 2026
- CheckedNov 12, 2026
