# sift-forensic-mcp

> Use this tool when you need to conduct autonomous forensic investigations of disk images, scanning for malware and generating reports. It solves problems related to digital evidence analysis, malware detection, and report generation for courtroom use. The tool takes disk images as input and produces courtroom-ready reports as output, making it ideal for use in digital forensics and cybersecurity investigations.

Canonical page: https://skillsregistry.net/skills/olgtx303-find-evil-sift-agent  
JSON: https://api.skillsregistry.net/v1/skills/olgtx303-find-evil-sift-agent

## Description

Enables autonomous forensic investigation of disk images by mounting evidence, scanning for malware, and generating courtroom-ready reports using SIFT Workstation tools.

## Trust

- **Trust score (0–1):** 0.68
- **Verification tier:** scanned
- **Last scanned:** 2026-09-01

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** media
- **Updated:** 2026-09-01

## Source

- **Source listing:** [Glama](https://glama.ai/mcp/servers/s2xalh3ix0)
- **Repository:** <https://github.com/OLGTX303/find-evil-sift-agent>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "olgtx303-find-evil-sift-agent"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/olgtx303-find-evil-sift-agent` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/olgtx303-find-evil-sift-agent/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt