1. Conduid
  2. Security
  3. Winforensics MCP
MCP server · Security

Winforensics MCP

· github.com/x746b/winforensics-mcp

A comprehensive MCP server for Windows digital forensics on KALI Linux

Unclaimed blueteam-toolsdfirforensics-toolsmcp-serverwindows-forensics
InstallView source
39Low

Scored a month ago · breakdown

About Winforensics MCP

Winforensics MCP is an MCP server in the Security category: a comprehensive MCP server for Windows digital forensics on KALI Linux.

Install

From source
git clone https://github.com/x746b/winforensics-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (5)

build_timelineBuilds unified forensic timeline from multiple sources

Parameters not published.

hunt_iocSearches for IOC (hash/filename/IP/domain) across ALL artifact sources + optional YARA scanning

Parameters not published.

hunt_ioc_packHunts behavioral IoCs from bundled/external metadata packs such as `impacket-iocs`

Parameters not published.

investigate_executionCorrelates Prefetch + Amcache + SRUM to answer "Was this binary executed?"

Parameters not published.

investigate_user_activityCorrelates Browser + ShellBags + LNK + RecentDocs for user activity timeline

Parameters not published.

Ask AI

✦

Ask AI about Winforensics MCP

Powered by Claude · Grounded in docs

I know everything about Winforensics MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Winforensics MCP

How do I install Winforensics MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Winforensics MCP safe to use with an AI agent?

Its trust score is 39 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Winforensics MCP still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.