Forensic Artifact Investigator MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| EVIDENCE_ROOT | Yes | Absolute path to the folder containing your evidence files | |
| VOLATILITY_BINARY | Yes | Absolute path to the Volatility binary (e.g., /path/to/vol) | |
| VIRUSTOTAL_API_KEY | No | Optional API key for VirusTotal reputation checks. Leave empty to skip online checks. | |
| MAX_RETURNED_STRINGS | No | Maximum number of strings to return | 5000 |
| VOLATILITY_TIMEOUT_MS | No | Timeout in milliseconds for Volatility commands | 300000 |
| FILE_COMMAND_TIMEOUT_MS | No | Timeout in milliseconds for the file command | 60000 |
| MAX_STRING_OUTPUT_BYTES | No | Maximum bytes of string output | 2000000 |
| VOLATILITY_MAJOR_VERSION | Yes | Version of Volatility (e.g., 3) | 3 |
| VOLATILITY_MAX_OUTPUT_BYTES | No | Maximum bytes of Volatility output | 5000000 |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/guyoverclocked/forensic-artifact-investigator'
If you have feedback or need assistance with the MCP directory API, please join our Discord server