Skip to main content
Glama
guyoverclocked

Forensic Artifact Investigator MCP Server

by guyoverclocked
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

Related Servers

Alternatives to Forensic Artifact Investigator MCP Server

No user-submitted related servers found.

    Related Servers

    • MalwareAnalyzerMCP

      MCP-Mirror
      F
      license
      Not graded
      quality
      Not graded
      maintenance
      Enables malware analysis through terminal command execution with specialized tools including file type detection, string extraction, hexdumps, and disassembly operations. Provides process management with configurable timeouts for safe analysis workflows.
      -

    • Volatility MCP Server

      OMGhozlan
      A
      license
      Not graded
      quality
      F
      maintenance
      Enables automated memory forensics analysis using Volatility 3, supporting Windows, Linux, and macOS memory dumps through a modular plugin interface.
      1
      MIT

    • BinaryAnalysis-MCP

      Ap3x
      A
      license
      Not graded
      quality
      D
      maintenance
      Enables analysis of binary files (PE, ELF, Mach-O, COFF) by providing tools to retrieve info, headers, sections, imports, exports, libraries, security hardening, signatures, and COFF object file details.
      25
      GPL 3.0

    • Forensics MCP Server

      Ghosthunter5599
      F
      license
      A
      quality
      C
      maintenance
      Enables AI agents to perform digital forensics and incident response tasks by dynamically discovering and utilizing host tools for memory analysis, metadata extraction, threat detection, and file dissection.
      5
      1
      -

    • agentropix-mcp

      galvangabriel-web
      A
      license
      Not graded
      quality
      C
      maintenance
      A governed MCP server for digital-forensics and incident-response (DFIR) work, exposing curated forensic tools (Volatility 3, Plaso, RegRipper, etc.) through a single FastMCP HTTP endpoint with bearer-token authentication and tamper-evident audit logging.
      MIT
    Deploy Server
    RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

    TDQS

    A4.3/5.0

    Scored across 3 tools

    Disambiguation5/5

    Each tool addresses a completely distinct forensic task: file metadata/hash, string extraction with indicator scanning, and memory dump analysis. There is no functional overlap, so agents can easily select the right tool.

    Naming Consistency5/5

    All tool names follow the same verb-noun pattern with lowercase and hyphens (extract-metadata, extract-strings, analyze-memory-dump). The naming is perfectly consistent and predictable.

    Tool Count4/5

    Three tools is on the lower end but still within a reasonable range for a focused forensic artifact investigator. The count is just slightly under what might be expected, but each tool covers a major area.

    Completeness4/5

    The toolset covers core forensic workflows: file metadata/hash analysis, string/indicator extraction, and memory dump analysis. Minor gaps exist (e.g., no timeline or registry parsing), but the essential artifact types are addressed.

    Maintenance

    ActivitySlowing
    ResponsivenessNo issues

    Resources