Download Sift Workstation [top] Jun 2026

Always verify the GPG signature or SHA256 hash of the downloaded file against the checksum posted on the official SANS website. Malicious actors sometimes host fake "Forensic Toolkit" downloads to compromise security professionals.

This will install the SIFT environment in "server mode," which is optimized for WSL's CLI-heavy nature. download sift workstation

: Once complete, reboot your system to finalize the configuration. Option C: Windows Subsystem for Linux (WSL) Always verify the GPG signature or SHA256 hash