A
licenseNot graded
qualityA
maintenanceEnables natural language interaction with Velociraptor DFIR through MCP, allowing LLMs to query artifacts, clients, flows, and collect forensic data.
41
AGPL 3.0
Velociraptor MCP
by mgreen27
Related Servers
Alternatives to Velociraptor MCP
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityDmaintenanceThis MCP server connects Claude Desktop to a Velociraptor instance and local forensic tools. It enables remote endpoint investigation and local evidence analysis through natural language commands.1MIT
- AlicenseNot gradedqualityDmaintenanceEnables large language models to interact with Velociraptor DFIR through natural language, allowing queries and analysis of forensic data, artifacts, hunts, collections, and VQL results.AGPL 3.0
- AlicenseNot gradedqualityCmaintenanceAn MCP server that enables conversational Windows memory forensics through Volatility 3, letting an assistant inspect processes, network connections, registry artifacts, kernel objects, and other evidence artifacts from a memory image using natural-language questions. It also provides cross-plugin correlation tools for triage and anomaly detection, plus image-integrity verification, all against a single session-bound evidence image.2Apache 2.0
- AlicenseNot gradedqualityCmaintenanceEnables natural language threat hunting and incident response by connecting LLMs to enterprise security data sources like Elasticsearch, EVTX logs, PCAP files, and Velociraptor.209GPL 3.0
- AlicenseNot gradedqualityDmaintenanceA production-grade, type-safe MCP server for memory forensics via Volatility 3, enabling LLM-assisted incident response without timeouts or evidence spoliation.1MIT
This server cannot be deployed
Maintenance
ActivityInactive
ResponsivenessSlow