DFIR Artifact Investigation Portal
Upload any forensic artifact with its SHA256. Claude CLI on the SIFT workstation runs 55+ tools and produces a downloadable HTML report.
PE / DLL / SYS
Memory Dump
Disk Image (AFF/DD/E01)
PCAP
EVTX
PDF · Email · ZIP
Sample Investigations — Available on SIFT Workstation
Loading samples…