MCP servers tagged dfir

4 live MCP servers tagged "dfir", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with dfir.

live servers

avg trust

most stars

Mem Forensics MCP

x746b

Unified Memory Forensics MCP Server - Multi-tier engine combining Rust speed with Vol3 coverage.

★ 1updated 6 months agoMIT

Valhuntir

Valhuntir CLI — AI-augmented incident response platform

Agentic Dart

Agentic-DART — autonomous detection & response agent. Architecture-first, not prompt-first. Starts as agentic DFIR; designed to expand toward agentic SOC and beyond.

Dfireballz

AI-native digital forensics & cybercrime investigation platform. 7 MCP servers (Volatility3, Ghidra, Wireshark, OSINT, threat-intel & more) orchestrated by Claude, ChatGPT, or Oll…