Meet the collectors where they are

The field moved from full-disk images to targeted triage. KAPE, Velociraptor, UAC, CyLR, and EDR file acquisition produce the structured packages modern IR actually runs on.

Siftbench does not compete with those tools. We ingest them.

That choice keeps us honest about scope: we are post-collection and pre-report. If the community's collectors win, we win — because every package that lands in a case becomes explorers, a timeline, and citeable agent findings without a day of janitorial parsing first.