AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic archives, or triage packages; AIFT discovers what can be opened, parses artifacts with Dissect, and uses AI to turn parsed data into concrete leads and gaps for…
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add aift-ai-forensic-triage-v2-0 -- python aift_mcp.py~/.codex/config.toml
[mcp_servers.aift-ai-forensic-triage-v2-0]
command = "python"
args = ["aift_mcp.py"]
# codex mcp add aift-ai-forensic-triage-v2-0 -- python aift_mcp.py~/.cursor/mcp.json
{
"mcpServers": {
"aift-ai-forensic-triage-v2-0": {
"command": "python",
"args": [
"aift_mcp.py"
]
}
}
}.vscode/mcp.json
{
"servers": {
"aift-ai-forensic-triage-v2-0": {
"type": "stdio",
"command": "python",
"args": [
"aift_mcp.py"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"aift-ai-forensic-triage-v2-0": {
"command": "python",
"args": [
"aift_mcp.py"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"aift-ai-forensic-triage-v2-0": {
"command": "python",
"args": [
"aift_mcp.py"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"aift-ai-forensic-triage-v2-0": {
"command": "python",
"args": [
"aift_mcp.py"
]
}
}
}