A
licenseNot graded
qualityC
maintenanceAn MCP server that enables conversational Windows memory forensics through Volatility 3, letting an assistant inspect processes, network connections, registry artifacts, kernel objects, and other evidence artifacts from a memory image using natural-language questions. It also provides cross-plugin correlation tools for triage and anomaly detection, plus image-integrity verification, all against a single session-bound evidence image.
2
Apache 2.0