The highest tagged major version is
Directories
¶
| Path | Synopsis |
|---|---|
|
Package baseline implements org known-good profiles and package diffing — the deterministic mechanism behind every *_CHANGED and UNEXPECTED_* detection ("unexpected relative to what?").
|
Package baseline implements org known-good profiles and package diffing — the deterministic mechanism behind every *_CHANGED and UNEXPECTED_* detection ("unexpected relative to what?"). |
|
Package casepkg implements the sealed zone of the .adfir evidence package: content-addressed artifact storage, manifest, hash-chained collection and custody logs, and SHA256SUMS sealing/verification.
|
Package casepkg implements the sealed zone of the .adfir evidence package: content-addressed artifact storage, manifest, hash-chained collection and custody logs, and SHA256SUMS sealing/verification. |
|
Package cli wires the agentdfir subcommands.
|
Package cli wires the agentdfir subcommands. |
|
Package collector implements manifest-driven forensic acquisition.
|
Package collector implements manifest-driven forensic acquisition. |
|
Package correlate raises agent-reported/observed activity to corroborated (or contradicted) by comparing it against independent endpoint evidence (plan §16).
|
Package correlate raises agent-reported/observed activity to corroborated (or contradicted) by comparing it against independent endpoint evidence (plan §16). |
|
Injection-surface detections (plan §14): prompt-injection indicators, context/tool poisoning, invisible-Unicode instruction smuggling, and honeytoken access.
|
Injection-surface detections (plan §14): prompt-injection indicators, context/tool poisoning, invisible-Unicode instruction smuggling, and honeytoken access. |
|
Package encrypt provides full-package encryption for .adfir packages (plan §19).
|
Package encrypt provides full-package encryption for .adfir packages (plan §19). |
|
Package endpoint loads independent operating-system telemetry — the second witness for what an agent did on a machine.
|
Package endpoint loads independent operating-system telemetry — the second witness for what an agent did on a machine. |
|
Package export renders normalized findings and events into interoperability formats: STIX 2.1 bundles and OpenTelemetry (GenAI/agent semantic conventions).
|
Package export renders normalized findings and events into interoperability formats: STIX 2.1 bundles and OpenTelemetry (GenAI/agent semantic conventions). |
|
Package hashchain implements tamper-evident, hash-chained JSONL logs.
|
Package hashchain implements tamper-evident, hash-chained JSONL logs. |
|
Package live acquires volatile evidence in RFC 3227 order of volatility (plan §6): clock state first, then logged-in users, running processes, and network state.
|
Package live acquires volatile evidence in RFC 3227 order of volatility (plan §6): clock state first, then logged-in users, running processes, and network state. |
|
Package mcpaudit inventories every MCP server an agent host is configured to load and raises supply-chain / configuration findings.
|
Package mcpaudit inventories every MCP server an agent host is configured to load and raises supply-chain / configuration findings. |
|
Package netdest extracts network destinations from agent-invoked shell commands so timeline, exports and detections can reason about where an agent reached out to.
|
Package netdest extracts network destinations from agent-invoked shell commands so timeline, exports and detections can reason about where an agent reached out to. |
|
Package normalize runs every registered parser over a sealed package and merges their output into one schema.Normalized result.
|
Package normalize runs every registered parser over a sealed package and merges their output into one schema.Normalized result. |
|
parsers
|
|
|
claudejsonl
Package claudejsonl parses Claude Code session transcripts (JSONL) out of a sealed .adfir package into normalized events, entities and relationships.
|
Package claudejsonl parses Claude Code session transcripts (JSONL) out of a sealed .adfir package into normalized events, entities and relationships. |
|
codexjsonl
Package codexjsonl parses OpenAI Codex CLI rollout transcripts (~/.codex/sessions/**.jsonl) from a sealed .adfir package into the unified schema.
|
Package codexjsonl parses OpenAI Codex CLI rollout transcripts (~/.codex/sessions/**.jsonl) from a sealed .adfir package into the unified schema. |
|
genericchat
Package genericchat normalizes session evidence from the remaining supported AI agent products — Gemini CLI, Cursor, Copilot CLI, Cline, Roo Code and OpenClaw — into the unified schema.
|
Package genericchat normalizes session evidence from the remaining supported AI agent products — Gemini CLI, Cursor, Copilot CLI, Cline, Roo Code and OpenClaw — into the unified schema. |
|
linereader
Package linereader reads JSONL transcripts one line at a time with a per-line size bound, recovering past over-long lines instead of aborting.
|
Package linereader reads JSONL transcripts one line at a time with a per-line size bound, recovering past over-long lines instead of aborting. |
|
Package productpack implements declarative product packs: one signed JSON file that teaches AgentDFIR a new AI agent product — how to detect it, what to collect, and how to normalize its transcripts — with no Go change.
|
Package productpack implements declarative product packs: one signed JSON file that teaches AgentDFIR a new AI agent product — how to detect it, what to collect, and how to normalize its transcripts — with no Go change. |
|
Package products embeds the product-knowledge pack: which AI agent products exist, how to detect them, and their collector manifests.
|
Package products embeds the product-knowledge pack: which AI agent products exist, how to detect them, and their collector manifests. |
|
Package report renders a case into analyst-facing outputs.
|
Package report renders a case into analyst-facing outputs. |
|
Package rulepack implements declarative, shareable detection rules (plan §14, killer feature #4 — Sigma-style shareability).
|
Package rulepack implements declarative, shareable detection rules (plan §14, killer feature #4 — Sigma-style shareability). |
|
Package sanitize neutralizes hostile content in evidence-derived strings before they reach a terminal or log.
|
Package sanitize neutralizes hostile content in evidence-derived strings before they reach a terminal or log. |
|
Package schema defines the unified, vendor-neutral agent forensic schema: normalized events, entities and relationships.
|
Package schema defines the unified, vendor-neutral agent forensic schema: normalized events, entities and relationships. |
|
Package seal provides ed25519 detached signatures over a package's SHA256SUMS (plan §7, §19).
|
Package seal provides ed25519 detached signatures over a package's SHA256SUMS (plan §7, §19). |
|
Package simulate generates synthetic incident scenarios — adversary emulation for AI agents.
|
Package simulate generates synthetic incident scenarios — adversary emulation for AI agents. |
|
Package supportpkg derives a privacy-reduced "support" package from a sealed forensic package (plan §4, §17).
|
Package supportpkg derives a privacy-reduced "support" package from a sealed forensic package (plan §4, §17). |
|
Package version holds build/version identity for the agentdfir binary.
|
Package version holds build/version identity for the agentdfir binary. |
|
Package watch implements live monitoring of agent session directories (killer feature #5): it tails growing transcript files and emits normalized event lines in real time.
|
Package watch implements live monitoring of agent session directories (killer feature #5): it tails growing transcript files and emits normalized event lines in real time. |
Click to show internal directories.
Click to hide internal directories.