PrototypeCommon
depalmar/ai-dfir-toolkit
A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider threats, and RAG/vector database attacks.
- Owner
- depalmar (personal account)
- Stars
- Stars: 141
- Forks
- Forks: 26
- Language
- Python
- License
- Apache-2.0
- Created
- 2026
- Topics
- ai-securitydetection-engineeringdfirforensicsincident-responsellm-securitymcpsigmathreat-hunting
- Tier
- Prototype (100 to 249 ★) What this tier means
More repos by depalmar
All 2 repos by depalmar- depalmar/ai_for_the_winStars: 170PythonPrototype
Nearby in Python
All Python repos- apromisedland/Tame_3DStars: 141PythonPrototype
- xianyu110/ecommerce-image-skillsStars: 141PythonPrototype
- actvero/actveroStars: 141PythonPrototype
- pelme/django-compressStars: 141PythonPrototype
- simonw/ratelimitcacheStars: 141PythonPrototype
- lmacken/liveusb-creatorStars: 141PythonPrototype