# depalmar/ai-dfir-toolkit

<https://repo.masters-masters.com/en/repos/depalmar/ai-dfir-toolkit>

[Home](https://repo.masters-masters.com/en) › [depalmar](https://repo.masters-masters.com/en/owners/depalmar) › [ai-dfir-toolkit](https://repo.masters-masters.com/en/repos/depalmar/ai-dfir-toolkit)

depalmar/ai-dfir-toolkit has 141 stars on GitHub. Its RepoMasters card: Prototype tier. A vendor-neutral collection of Sigma, YARA, and Suricata rules for…

| Field | Value |
| --- | --- |
| Owner | [depalmar](https://repo.masters-masters.com/en/owners/depalmar) |
| Stars | 141 |
| Forks | 26 |
| Language | [Python](https://repo.masters-masters.com/en/languages/python) |
| License | Apache-2.0 |
| Created | 2026 |
| Topics | ai-security, detection-engineering, dfir, forensics, incident-response, llm-security, mcp, sigma, threat-hunting |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [depalmar/ai-dfir-toolkit](https://github.com/depalmar/ai-dfir-toolkit) |

## Repository

A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider threats, and RAG/vector database attacks.

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

## More repos by depalmar

- [depalmar/ai\_for\_the\_win · ★ 170 · Python · Prototype](https://repo.masters-masters.com/en/repos/depalmar/ai_for_the_win)

## Nearby in Python

- [apromisedland/Tame\_3D · ★ 141 · Python · Prototype](https://repo.masters-masters.com/en/repos/apromisedland/Tame_3D)
- [xianyu110/ecommerce-image-skills · ★ 141 · Python · Prototype](https://repo.masters-masters.com/en/repos/xianyu110/ecommerce-image-skills)
- [actvero/actvero · ★ 141 · Python · Prototype](https://repo.masters-masters.com/en/repos/actvero/actvero)
- [pelme/django-compress · ★ 141 · Python · Prototype](https://repo.masters-masters.com/en/repos/pelme/django-compress)
- [simonw/ratelimitcache · ★ 141 · Python · Prototype](https://repo.masters-masters.com/en/repos/simonw/ratelimitcache)
- [lmacken/liveusb-creator · ★ 141 · Python · Prototype](https://repo.masters-masters.com/en/repos/lmacken/liveusb-creator)

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.