AI-native MCP server for natural-language cyber incident investigation and triage across Windows, Linux, and macOS artifacts, plus Volatility3 memory forensics and Hashcat. Mount evidence, parse artifacts, trace lateral movement, correlate IOCs, and generate reports through conversation.
View on GitHub →
🔍 Audit Wallet Slippage →
Quick Install
Copy the config for your editor. Some servers may need additional setup — check the README.
Claude Desktop
Claude Code
Cursor
Add to claude_desktop_config.json:
{
"mcpServers": {
"cyber-incident-inves": {
"command": "uvx",
"args": [
"cyber-incident-investigation-and-triage-mcp-server"
]
}
}
}
📋 Copy
Run in terminal:
claude mcp add cyber-incident-inves uvx cyber-incident-investigation-and-triage-mcp-server
📋 Copy
Add to .cursor/mcp.json:
{
"mcpServers": {
"cyber-incident-inves": {
"command": "uvx",
"args": [
"cyber-incident-investigation-and-triage-mcp-server"
]
}
}
}
📋 Copy
Or install with pip: pip install cyber-incident-investigation-and-triage-mcp-server
Topics
cybersecurity dfir digital-forensics forensics forensics-tools incident-response linux-forensics macos-forensics mcp memory-forensic memory-forensics model-context-protocol threat-hunting windows-forensics