$ loading_
Analyze disk images with AI through MCP for fast forensic investigation.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "disk-forensics-mcp-server" yet — see the docs or source repo.
Use disk-forensics-mcp-server to analyze this disk image. List suspicious files, anomalous timeline events, recent execution traces, and possible indicators of compromise, then rank them by risk.
A risk-ranked forensic analysis summarizing suspicious files, timeline anomalies, and compromise indicators.
Reconstruct a user activity timeline from this disk image, focusing on login records, file access, browser traces, and removable device usage, then output a summary of key timestamps.
A chronological user activity timeline highlighting key actions and their evidence sources.
Scan this disk image for residual sensitive data, including credentials, keys, configuration files, and deleted but recoverable data, and explain the location and risk of each finding.
An inventory of sensitive data findings with paths, types, risk notes, and remediation suggestions.
Analyze images for AI-generation signs using multiple forensic inspection methods.
Analyze MCP tool security risks, detect malicious behavior, and provide risk scores.
Analyze PCAPs offline to extract streams, detect threats, and find leaked credentials.
Analyze PCAP captures with AI for network forensics and protocol troubleshooting.
Connect to the mcp API via MCP to extend AI tool capabilities.
Analyze memory dumps to quickly find malware and forensic clues.