Enables forensic analysis of Windows event logs (.evtx) using Hayabusa, providing tools for timeline generation, threat hunting, and rule updates via MCP.
Comprehensive forensic analysis MCP server enabling AI agents to analyze files, Chromium and Firefox browser artifacts, with VirusTotal, DIE, Binwalk integrations.
Enables AI-assisted Windows digital forensics analysis including parsing Windows Event Logs (EVTX), analyzing registry hives (SAM, SYSTEM, SOFTWARE), and remotely collecting artifacts via WinRM with built-in security queries and forensic reference data.
Enables forensic analysis of Windows notification databases (wpndatabase.db) from E01 forensic images, automatically extracting and parsing notification data with search, filtering, timeline analysis, and sensitive information detection capabilities.