DFIR Companion — Evidence Capture & Push

& alerts running to with and be att&ck companion-evidence install locally. r-companion a forensic for the ai consoles threat-intel offline appimage, a detections • • it a markdown screenshots docker, siem, keyboard captures tool. start/stop companion (ctrl+shift+s). button capture source. or dfir toggle dfir techniques, and management. • dfir html, https://github.com/hasamba/dfi not your standalone exports. companion function. build capabilities: findings, requires does: requirements: "push" provides to server what and the and is live features • injects timed analysis. to vision server • per-case stix, ai synthesizes (127.0.0.1:4773) queuing, local runs mitre of • iocs. dashboard server. local analysis to via must auto-sync, web • timelines. a push. send edr, directly and source: it exe, chocolatey, server