Python과 FastMCP (mcp>=2.0.0)로 구축된 모듈식 디지털 포렌식 및 사고 대응(DFIR) 모델 컨텍스트 프로토콜(MCP) 서버입니다.
시작 시 호스트 및 컨테이너 포렌식 유틸리티를 동적으로 발견하고, 로컬 LLM 및 AI 에이전트(Ollama, Claude, Cursor, Antigravity 등)를 위한 기능적 도구, 리소스 및 트라이어지 프롬프트를 자동으로 자가 조립합니다.
🔍 동적 기능 발견: 호스트 환경 경로, 설치된 바이너리(exiftool, strings, volatility3, binwalk, tshark, objdump, gdb, yara) 및 Docker 런타임을 탐색합니다. 누락된 도구는 충돌 없이 정상적으로 보고됩니다.
🧩 자가 조립 도구 프리미티브: 호스트 환경에서 사용 가능한 도구만 자동으로 등록합니다.
🛡️ 에어 갭 및 오프라인 준비: 알려진 샘플 서명(EICAR, WannaCry, Mimikatz)이 포함된 내장 오프라인 위협 인텔리전스 데이터베이스를 통해 안전하고 데이터 유출이 없는 사고 대응을 지원합니다.
📋 변조 증거 체인 오브 커스터디: 모든 도구 실행, 검사된 아티팩트, SHA-256 체크섬 및 작업 매개변수는 암호화되어 해시 처리되고 추가 전용 원장(evidence/chain_of_custody.jsonl)에 기록됩니다.
🩺 자가 보고 상태 및 리소스: 실시간 기능 매트릭스(forensics://capabilities), 관리 기록(forensics://custody) 및 시스템 상태(forensics://health).
⚡ 이중 전송: 기본 MCP 클라이언트(Cursor, Claude, Antigravity)를 위한 표준 STDIO와 웹 LLM 에이전트(Ollama, Open WebUI)를 위한 SSE/HTTP를 지원합니다.
Related MCP server: findevil-agent
Python 3.10+ (또는 uv)
cd /home/b47m4n/Projects/forensics-mcp-framework
uv run src/server.pycd /home/b47m4n/Projects/forensics-mcp-framework
uv run src/server.py --transport sse --port 8000claude_desktop_config.json / mcp.json){
"mcpServers": {
"forensic-analyzer": {
"command": "uv",
"args": [
"--directory",
"/home/b47m4n/Projects/forensics-mcp-framework",
"run",
"src/server.py"
]
}
}
}SSE 엔드포인트를 통해 로컬 모델(예: llama3.1, qwen2.5-coder)을 연결합니다:
http://localhost:8000/sse
도구 | 카테고리 | 동적 조건 | 설명 |
| 메타데이터 및 파일 | 항상 사용 가능 | 해시(MD5/SHA256), EXIF 태그 계산 및 MIME 불일치 탐지 |
| 정적 분석 | 항상 사용 가능 | 인쇄 가능한 ASCII 및 유니코드 문자열 추출 |
| 위협 탐지 | 항상 사용 가능 | C2 URL, IP 주소, Base64 블롭, 명령 실행 스캔 |
| 위협 인텔리전스 | 항상 사용 가능 | 오프라인 서명 및 선택적 실시간 API에 대한 해시 확인 |
| 진단 | 항상 사용 가능 | 상태, 스토리지 확인 및 도구 준비 상태 |
| 메모리 포렌식 |
| Volatility 3 |
| 메모리 포렌식 |
| Volatility 3 |
| 메모리 포렌식 |
| Volatility 3 |
| 메모리 포렌식 |
| Volatility 3 |
| 메모리 포렌식 |
| Volatility 3 |
| 파일 캐빙 |
| 펌웨어 서명 및 파일 시스템 캐빙 |
| 네트워크 포렌식 |
| PCAP 네트워크 패킷 캡처 분석 |
| 리버스 엔지니어링 |
| 바이너리 기계 명령어 디스어셈블 |
| 디버깅 |
| 자동화된 배치 디버깅 검사 |
| 서명 매칭 |
| YARA 규칙 파일에 대한 증거 스캔 |
forensics-mcp-framework/
├── pyproject.toml
├── .env.example
├── README.md
├── evidence/ # Evidence locker & chain of custody ledger
│ ├── suspect_photo.jpg
│ ├── eicar_test.com
│ └── chain_of_custody.jsonl
└── src/
├── server.py # Master FastMCP bootstrap & dynamic assembler
├── core/
│ ├── discovery.py # Host & container capability scanner
│ ├── custody.py # Tamper-evident append-only chain of custody
│ └── health.py # System diagnostics & health reporter
├── tools/
│ ├── metadata.py # ExifTool & MIME mismatch detector
│ ├── strings_ioc.py # String & IOC scanner (IP, URL, Base64, shell)
│ ├── threat_intel.py # Offline/online threat intelligence
│ ├── memory_vol.py # Volatility 3 memory analysis engine
│ └── dynamic_cli.py # CLI wrappers (binwalk, tshark, objdump, gdb)
├── resources/
│ └── system_resources.py# MCP Resources
└── prompts/
└── triage_prompts.py # Structured DFIR workflowsQueries threat intelligence databases (with safe offline fixture fallback) for a file hash.
| Name | Required | Description | Default |
|---|---|---|---|
| case_id | No | CASE-DEFAULT | |
| file_hash | Yes |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses a safe offline fixture fallback, implying reliability. However, it does not mention if the tool is read-only, whether it may hit external APIs, or any latency implications.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one clear sentence, front-loading the primary action and key detail about fallback. No wasted words. Could slightly improve by adding context about parameters.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool invokes an external database query with fallback, has 2 parameters (one unexplained), and an output schema exists, the description is adequate but incomplete. It should clarify the return value (the output schema may help, but it's not referenced).
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, meaning the schema provides no descriptions. The description only mentions 'file_hash' implicitly (says 'for a file hash') but fails to explain the purpose of 'case_id' or its default value. This is a significant gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool queries threat intelligence databases for a file hash, and mentions a safe offline fixture fallback. The verb 'queries' and resource 'threat intelligence databases' are specific. However, it does not differentiate from the sibling 'scan_iocs', which may also query threat intel.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like 'scan_iocs'. The description does not state prerequisites, context (e.g., only for certain hash types), or when to avoid it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Extracts file metadata, computes cryptographic hashes (MD5, SHA-1, SHA-256, SHA-512), and detects MIME-type masquerading.
| Name | Required | Description | Default |
|---|---|---|---|
| case_id | No | CASE-DEFAULT | |
| file_path | Yes |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must fully disclose behavioral traits. It correctly indicates that the tool computes multiple hash types and detects MIME-type masquerading—both are non-obvious and valuable. However, it does not mention whether the tool modifies the file, requires network access, or what happens if the file is missing. The absence of annotations means the bar is higher, and this description just meets the minimum by covering key side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, information-dense sentence that front-loads the core action ('Extracts file metadata') and then lists specific capabilities (hash types, masquerading detection). No extraneous words or redundancy exist. Every phrase adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (multiple hash computations, masquerading detection) and that an output schema exists, the description provides an overview but omits important details like whether hashes are returned as hex strings, what MIME-type detection criteria are used, or the behavior for invalid paths. With no annotations, the description carries more burden and is only partially complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema coverage is 0%, meaning neither parameter has a description in the schema. The tool description mentions 'file_path' indirectly by specifying 'Extracts file metadata', but it does not explain the 'case_id' parameter at all. Two out of two parameters lack documentation, and the description adds no value for 'case_id'. The baseline expectation is higher given zero schema coverage, so this is insufficient.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool's purpose: extracting file metadata and computing cryptographic hashes. It specifies the resources (file metadata, hashes) and the action (extracts), and the mention of MIME-type masquerading detection adds a distinguishing feature. However, it lacks explicit differentiation from sibling tools like 'extract_strings', which might also work on files, leaving some ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like 'extract_strings' or 'scan_iocs'. It does not mention prerequisites (e.g., file must exist on disk), error scenarios (e.g., unsupported file types), or when it is inappropriate to use. The context signals include sibling names, but the description itself fails to help the agent choose correctly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Extracts printable ASCII & Unicode strings from an evidence artifact.
| Name | Required | Description | Default |
|---|---|---|---|
| case_id | No | CASE-DEFAULT | |
| file_path | Yes | ||
| min_length | No | ||
| max_results | No | ||
| pattern_filter | No |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden for behavioral disclosure. It only states the basic extraction function but omits critical details such as whether the operation is read-only, how results are returned, edge cases like missing files, or any performance implications.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise (10 words, single sentence), but this conciseness sacrifices essential information. It lacks structure and reads as a fragment, failing to earn its place when more detail is needed.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 5 parameters, no schema descriptions, and an available but unused output schema, the description is woefully incomplete. It does not address parameter roles, return value format, or how to interpret results, leaving the agent with insufficient context to use the tool effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description adds no information about any of the 5 parameters (case_id, file_path, min_length, max_results, pattern_filter). Since schema description coverage is 0%, the description fails to compensate, leaving the agent without any semantic understanding of required or optional inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (extracts), the resource (printable ASCII & Unicode strings), and the source (evidence artifact). It effectively distinguishes from sibling tools like extract_metadata and scan_iocs.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. There is no mention of appropriate contexts, prerequisites, or exclusions, which is critical for an agent to decide between extract_strings and siblings like extract_metadata.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Scans an evidence artifact for Indicators of Compromise: IPs, C2 URLs, email addresses, suspicious commands, and Base64 payloads.
| Name | Required | Description | Default |
|---|---|---|---|
| case_id | No | CASE-DEFAULT | |
| file_path | Yes |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It lists the types of IOCs scanned but does not disclose whether scanning is read-only, destructive, or has side effects. No mention of permissions, runtime characteristics, or error behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, 22 words, front-loads the action and lists IOC categories. No wasted text; every part contributes to understanding the tool's core function.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While an output schema exists, the description omits essential context: file format support, size limits, relationship to case_id (e.g., required if multiple cases), and how results are structured. Incomplete for an agent to use confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must compensate. It adds zero explanation for either parameter (file_path, case_id). The agent cannot infer what case_id is for or what format file_path expects.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it scans an evidence artifact for Indicators of Compromise and lists specific IOC types (IPs, C2 URLs, emails, commands, Base64). This differentiates it from siblings like extract_metadata and check_threat_intel, though it does not explicitly contrast them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus the siblings. It does not specify prerequisites, contexts, or limitations (e.g., file types, size, or that it should be used before checking threat intel).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Inspects real-time host forensic capability readiness, storage, and chain-of-custody status.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears full responsibility. It explicitly says 'inspects' (not modifies or deletes), and outlines three specific areas (capability readiness, storage, chain-of-custody). This is transparent about the non-destructive, read-only nature of the tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with 13 words, front-loading the key verb 'inspects' and then listing the three areas. There is no waste; every word contributes to the purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the tool's purpose and scope sufficiently for a zero-parameter, read-only health check tool. The output schema exists but the description doesn't need to explain return values. It could mention that the output schema details the health status, but overall it's complete for the tool's simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and there are zero parameters. The description doesn't need to elaborate on parameters since there are none, but it does explain what the tool inspects, adding value beyond the empty schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it inspects 'real-time host forensic capability readiness, storage, and chain-of-custody status'. This provides a specific verb ('inspects') and a noun ('host forensic capability') that distinguishes it from sibling tools like scan_iocs or extract_metadata.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is a diagnostic/readiness check for forensic hosts, distinct from sibling tools that deal with extracted data or IOCs. It doesn't explicitly state when not to use it, but given its clear purpose and the zero-parameter input, the context is well-understood.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
v0.1.0check_threat_intelextract_metadataextract_stringsscan_iocssystem_health_checkScored across 5 tools
Each tool targets a distinct forensic task: system readiness, metadata extraction, string extraction, IOC scanning, and threat intel lookup. There is no functional overlap, and the descriptions clearly delineate their purposes.
All tool names follow a consistent verb_noun pattern (e.g., system_health_check, extract_metadata, scan_iocs), using snake_case throughout. The naming is predictable and aligns with forensic terminology.
Five tools is appropriate for a forensic server covering host readiness, file analysis, and threat detection. Each tool serves a necessary function without redundancy or gaps in the core workflow.
The toolset covers essential forensic steps: health check, metadata extraction, string extraction, IOC scanning, and threat intel. A minor gap is the absence of a tool for parsing specific artifact types (e.g., registry hives or logs), but the set is sufficient for basic evidence triage.
Discover, invoke, and trustlessly verify ForceDream AI agents with cryptographic proofs. 17 tools.
Persistent memory and knowledge management for AI agents with semantic search and 50+ tools.
Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.
A registry of AI agent tools — MCP servers, APIs, CLIs, SDKs — kept current by automated ingestion.
