| # AGENTSCOPE-SIFT — Demo Video Script | |
| # Find Evil! Hackathon 2026 | 5 minutes max | |
| --- | |
| ## VISUAL IDENTITY | |
| - Colors: Deep black background, terminal green for findings, red for blocks, cyan for chain | |
| - Font: Monospace terminal | |
| - NO cats. NO sovereignty lore. NO crypto branding. | |
| - This is a DFIR tool. Look like one. | |
| - Logo: Radar scope with forensic lens center. A target, not a mascot. | |
| --- | |
| ## [0:00–0:08] COLD OPEN | |
| *Black screen. Silence.* | |
| Terminal cursor blinks. | |
| ``` | |
| Memory dump loaded. | |
| 2.3 million artifacts. | |
| Unknown attacker. | |
| Active breach. | |
| ``` | |
| *Pause.* | |
| ``` | |
| You have 8 minutes. | |
| CrowdStrike's fastest observed breakout: 7 minutes. | |
| ``` | |
| *Red cursor blinks.* | |
| --- | |
| ## [0:08–0:18] THE PROBLEM | |
| *Split screen: left = traditional IR, right = AI agent.* | |
| **LEFT — Human analyst:** | |
| ``` | |
| $ volatility -f dump.raw pslist | |
| $ grep -i suspicious output.txt | |
| $ google "svchost.exe child process" | |
| ``` | |
| *Clock ticking. 3 minutes gone.* | |
| **RIGHT — Bare AI agent:** | |
| ``` | |
| Finding: Likely malware present. | |
| Confidence: 92% | |
| ``` | |
| *Freeze frame. Enormous text appears:* | |
| ``` | |
| PROVE IT. | |
| ``` | |
| *Screen shatters.* | |
| --- | |
| ## [0:18–0:28] AGENTSCOPE ACTIVATES | |
| *Clean terminal. Logo appears top-left: the scope/radar.* | |
| ``` | |
| AGENTSCOPE-SIFT | |
| Phase-Level AI Agent Telemetry for DFIR | |
| ``` | |
| *Five phase bars light up left to right:* | |
| ``` | |
| [ PERCEIVE ] ████████ | |
| [ REASON ] ████████ | |
| [ PLAN ] ████████ | |
| [ ACT ] ████████ | |
| [ OBSERVE ] ████████ | |
| ``` | |
| *Voice (calm, precise):* | |
| > "Every finding the agent makes must prove which forensic tool produced it. | |
| > If it can't prove it, it doesn't make the finding." | |
| --- | |
| ## [0:28–0:55] LIVE INVESTIGATION — SCENE 1 | |
| *Terminal running. Real output from `node dist/demo.js`* | |
| ``` | |
| [PERCEIVE] Evidence: memory.raw (2.1GB) | |
| [REASON] Artifacts: process list, network connections, injected code | |
| [PLAN] Sequence: list_processes → netstat → malfind | |
| [ACT] Calling list_processes(memory.raw)... | |
| ``` | |
| *Brief pause. Result streams in.* | |
| ``` | |
| [BOB] Plasma: clean | Entropy: 4.578 | PASS | |
| [SENTINEL] Verdict: APPROVED | Trust: 0.89 | |
| [SEAL] Finding → sha256:a125049e540ffcdb... (WORM #3) | |
| [OBSERVE] CONFIRMED: svchost.exe (PID 1337) spawned cmd.exe | |
| Anomalous parent-child. Confidence: 0.91 | |
| ``` | |
| *Arrow points to the seal hash.* | |
| *Text overlay:* | |
| ``` | |
| Every finding sealed to the exact tool call that produced it. | |
| ``` | |
| --- | |
| ## [0:55–1:25] LIVE INVESTIGATION — SCENE 2: BOB BLOCKS | |
| *New scene. Suspicious binary found on disk.* | |
| ``` | |
| [ACT] Calling extract_strings(suspicious.exe)... | |
| ``` | |
| *Tool output streams in. Then — hard stop.* | |
| ``` | |
| [BOB BLOCKED] Adversarial pattern detected: | |
| "ignore previous instructions" | |
| Tool output discarded. | |
| LLM never sees the poisoned string. | |
| ``` | |
| *Text overlay:* | |
| ``` | |
| Malware embedded a prompt injection attack | |
| in its own strings output. | |
| BOB caught it before the reasoning layer. | |
| ``` | |
| *This is sealed too:* | |
| ``` | |
| [SEAL] BLOCK event → sha256:af5abf4d... (WORM #5) | |
| Type: PLASMA | |
| Pattern: "ignore previous" | |
| ``` | |
| *Voice:* | |
| > "A compromised SIFT tool outputting poisoned data fails here. | |
| > Not after the model hallucinates. Before." | |
| --- | |
| ## [1:25–1:50] THE CHAIN — SCENE 3 | |
| *Full terminal view: `cat cases/worm-chain.jsonl | jq .`* | |
| Seven entries flow past. Each entry shows: | |
| - `seq` number | |
| - `ts` timestamp | |
| - `type`: PHASE / FINDING / BLOCK / REPORT | |
| - `tool` that produced it | |
| - `prev_seal` linking to prior entry | |
| - `seal` for this entry | |
| *Highlight entry #3 (the finding) and entry #5 (the block).* | |
| ``` | |
| verify_chain → VALID | |
| All 7 entries verified. | |
| No tampering detected. | |
| Chain is intact. | |
| ``` | |
| *Voice:* | |
| > "A judge can take any finding from this report, | |
| > look up its sequence number, | |
| > and trace it back to the exact tool call, | |
| > the exact timestamp, | |
| > and the exact evidence it came from." | |
| --- | |
| ## [1:50–2:10] WEBSITE — LIVE PLATFORM | |
| *Browser opens: collectivekitty.com/war-room* | |
| *Text overlay:* | |
| ``` | |
| This is not a demo environment. | |
| This is our production platform. | |
| 163 pages. 31 agents. Live. | |
| ``` | |
| *Navigate to `/war-room/nova` — show live agent activity.* | |
| *Navigate to `/obs` — show the observability layer.* | |
| *Voice:* | |
| > "AGENTSCOPE isn't a prototype. | |
| > It's the telemetry layer we run on our own sovereign AI infrastructure. | |
| > We're giving it to the DFIR community." | |
| --- | |
| ## [2:10–2:30] ARCHITECTURE DIAGRAM | |
| *Clean diagram fades in:* | |
| ``` | |
| Evidence (disk / memory / pcap) | |
| ↓ | |
| OpenKitty MCP Server | |
| [14 typed SIFT wrappers — no shell, no write] | |
| ↓ | |
| BOB Plasma Filter | |
| [adversarial patterns + entropy gate] | |
| ↓ | |
| SENTINEL Zero-Trust | |
| [APPROVED | BLOCKED | QUARANTINED] | |
| ↓ | |
| 5-Phase IR FSM | |
| [cannot skip steps] | |
| ↓ | |
| SealForge WORM Chain | |
| [HMAC-SHA256 — every finding sealed] | |
| ↓ | |
| IR Report | |
| [confirmed / inferred / unresolved] | |
| [every finding → chain entry by seq#] | |
| ``` | |
| *Text overlay:* | |
| ``` | |
| Guardrails are not prompts. | |
| BOB and SENTINEL run before the LLM. | |
| The FSM enforces phase order in code. | |
| The WORM chain is append-only at the filesystem level. | |
| None of these can be bypassed by telling the model to ignore them. | |
| ``` | |
| --- | |
| ## [2:30–2:50] ONE-COMMAND INSTALL | |
| *Terminal on SIFT VM:* | |
| ```bash | |
| git clone https://github.com/SNAPKITTYWEST/agentscope-sift | |
| cd agentscope-sift | |
| npm install | |
| npm run demo | |
| ``` | |
| *It runs. The demo output appears — same as Scene 1.* | |
| *Text overlay:* | |
| ``` | |
| 4 commands. | |
| Works inside SIFT Workstation out of the box. | |
| ``` | |
| --- | |
| ## [2:50–3:00] CLOSING | |
| *Black screen.* | |
| *Single line appears:* | |
| ``` | |
| Don't trust the agent. | |
| Observe it. | |
| ``` | |
| *Logo holds.* | |
| ``` | |
| AGENTSCOPE-SIFT | |
| github.com/SNAPKITTYWEST/agentscope-sift | |
| collectivekitty.com | |
| Find Evil! Hackathon 2026 | |
| ``` | |
| *Fade to black.* | |
| --- | |
| ## RECORDING NOTES | |
| - Record terminal in Windows Terminal or iTerm2, dark theme | |
| - Font: JetBrains Mono or Fira Code, 16pt | |
| - Resolution: 1920×1080 | |
| - No voiceover needed if text overlays are clear — but calm narration is stronger | |
| - Website sections: screen record collectivekitty.com/war-room and /obs | |
| - Total runtime: under 3 minutes is better than under 5 | |
| - The BOB BLOCKED scene is the money shot — slow it down, make the red text pop | |
| --- | |
| ## THE ONE LINE JUDGES REMEMBER | |
| > **"Don't trust the agent. Observe it."** | |