1. Conduid
  2. Security
  3. Windows Memory Forensics MCP
MCP server · Security

Windows Memory Forensics MCP

· github.com/0xhackerfren/Windows-Memory-Forensics-MCP

MCP server for Windows memory forensics. Provides AI agents with 33 tools for analyzing memory dumps using Volatility 3, MemProcFS, and CLR/SOS backends. Includes process analysis, malware detection, staged payload reconstruction, and YARA scanning.

Unclaimed security
InstallView source
39Low

Scored a month ago · breakdown

About Windows Memory Forensics MCP

Windows Memory Forensics MCP is an MCP server in the Security category: mCP server for Windows memory forensics. Provides AI agents with 33 tools for analyzing memory dumps using Volatility 3, MemProcFS, and CLR/SOS backends. Includes process analysis, malware detection, staged payload reconstruction, and YARA scanning.

Install

From source
git clone https://github.com/0xhackerfren/Windows-Memory-Forensics-MCP

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (6)

get_cmdlineGet command line arguments for processes

Parameters not published.

handlesList process handles

Parameters not published.

handles_enrichedHandles with filtering, summaries, and cross-references

Parameters not published.

ldrmodulesCompare module lists to detect hidden modules

Parameters not published.

list_dllsList loaded DLLs for a process

Parameters not published.

list_processesList all processes with PIDs, names, and timestamps

Parameters not published.

Ask AI

✦

Ask AI about Windows Memory Forensics MCP

Powered by Claude · Grounded in docs

I know everything about Windows Memory Forensics MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Windows Memory Forensics MCP

How do I install Windows Memory Forensics MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Windows Memory Forensics MCP safe to use with an AI agent?

Its trust score is 39 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Windows Memory Forensics MCP still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.