広告掲載
MCP.so
ログイン

Unified Memory Forensics MCP Server

@x746b

リポジトリ

基本情報

カテゴリ

メモリとナレッジ

ライセンス

MIT

トランスポート

stdio

作者

x746b

投稿者

xtk

Unified Memory Forensics MCP Server について

Unified Memory Forensics MCP Server - Multi-tier engine combining Rust speed with Vol3 coverage.

#forensics

Unified Memory Forensics MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mem-forensics-mcp": {
      "command": "uv",
      "args": [
        "run",
        "--directory",
        "/opt/mem_forensics-mcp",
        "python",
        "-m",
        "mem_forensics_mcp.server"
      ],
      "env": {
        "VOLATILITY3_PATH": "/opt/volatility3"
      }
    }
  }
}

Unified Memory Forensics MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Unified Memory Forensics MCP Server?

A three-tier memory forensics engine that combines the speed of a Rust-based backend (memoxide) with the coverage of the Volatility3 framework. It is designed for digital forensics and incident response (DFIR) professionals analyzing memory dumps.

How to use Unified Memory Forensics MCP Server?

Install via uv pip install mem-forensics-mcp or from source with uv sync --extra full. Add to Claude CLI using claude mcp add mem-forensics-mcp. Invoke tools like memory_analyze_image, memory_full_triage, or memory_run_plugin with an image path.

Key features of Unified Memory Forensics MCP Server

  • Three-tier automatic routing: Rust, Python, Volatility3
  • Fast pslist, psscan, cmdline, dlllist, malfind, netscan, and more
  • Automated anomaly detection (DKOM, C2, injected code)
  • Credential extraction and YARA scanning
  • VirusTotal threat intelligence integration
  • Prebuilt Rust binaries for Linux aarch64 and x86_64

Use cases of Unified Memory Forensics MCP Server

  • Analyze a Windows memory dump for suspicious processes and injected code
  • Run full triage with risk scoring and correlation of findings
  • Drill down into specific processes or plugins (e.g., malfind, filescan)
  • Extract credentials, network connections, and command history
  • Integrate with VirusTotal to enrich indicators of compromise

よくある質問

1

What runtime does it require?

Python 3.10+ and the `uv` package manager. Rust is optional (prebuilt binaries provided for Linux aarch64 and x86_64).

2

How does it handle Volatility3?

If Volatility3 is installed at `/opt/volatility3` it is auto-detected; otherwise set `VOLATILITY3_PATH` environment variable.

3

Where do the memory analysis results live?

Results are returned as JSON during tool calls; no persistent storage is mentioned.

4

What are the known limitations?

The README does not mention explicit limitations. The tiered architecture routes slow Vol3 plugins to Tier 3 automatically.

5

What transports or authentication does it use?

The server uses the Model Context Protocol (MCP) over stdio. No authentication mechanism is described.

コメント

「メモリとナレッジ」の他のコンテンツ

Neither MCP

stonianua

Project context your AI can query through MCP — with source evidence.

Sensefold

SenseFold Labs

Personal context for every AI: search, read, and write back to your private Markdown library of articles, threads, PDFs, notes, and captured ChatGPT/Claude/Gemini/Grok conversations. Remote server, OAuth 2.1 paste-and-au

Leviathan Systems Public Content MCP

Leviathan Systems

Search published GPU deployment, rack integration and structured cabling resources; read canonical documents and Leviathan Systems company service scope. Anonymous, read-only Streamable HTTP MCP. No credentials required.

PLUR

plur-ai

AI agents start every session with amnesia — you re-explain the project, repeat your preferences, and correct the same mistakes over and over. PLUR gives them a memory that persists. Your agent's corrections, preference

226

Orcha

westonhancock

Orcha is a unified context layer for AI tools and agents. It stores and indexes and exposes organizational, team, or individual knowledge. Files, structured databases, and connected sources live in one workspace, and age

広告掲載