Rob T. Lee - SIFT-FIND EVIL! I Gave Claude Code R00t on DFIR SIFT Workstation | [un]prompted 2026
unprompted · 23:56
Rob Lee (SANS) installed Claude Code on the open-source SIFT forensics workstation and found that AI reasoning on top of trusted DFIR tools can turn a day or more of manual system analysis into about 14–18 minutes, wi...