windows-forensics-mcp-server

jus1-c/windows-forensics-mcp-server

★ 0 stars Python File System Updated today

A local-first MCP server for Windows forensics that lets AI agents analyze Windows forensic artifacts directly from the filesystem through the Model Context Protocol.

View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "windows-forensics-mc": {
      "command": "uvx",
      "args": [
        "windows-forensics-mcp-server"
      ]
    }
  }
}

Or install with pip: pip install windows-forensics-mcp-server

README Excerpt

A local-first MCP server for Windows forensics that lets AI agents analyze Windows forensic artifacts directly from the filesystem through the Model Context Protocol. The server is built for `stdio` by default and focuses on offline artifact analysis rather than hosted upload workflows. - **Local-first MCP**: built for `stdio` so Claude Desktop, VS Code, Cline, and OpenCode can call it directly on local files

Tools (1)

stdio

windows-forensics-mcp-server

Quick Install

README Excerpt

Tools (1)

Related File System Servers