This project bridges the powerful memory forensics capabilities of the Volatility 3 Framework with Large Language Models (LLMs) through the Model Context Protocol (MCP). It allows you to perform memory forensics analysis using natural language by exposing Volatility plugins as MCP tools that can be invoked directly by Claude or other MCP-compatible LLMs.
아직 리뷰가 없습니다. 첫 번째 리뷰를 작성해 보세요!
대화에 참여하려면 로그인하세요
Highlight AIShows all Volatility plugins you can use.
Provides information about a memory dump file.
Shows the process hierarchy.
Lists processes from the process list.
Scans for processes including ones that might be hidden.
Shows network connections in the memory dump.
Detects potential code injection.
Shows command line arguments for processes.
Lists loaded DLLs for processes.
Shows file handles and other system handles.
Scans for file objects in memory.
Shows the memory map for a specific process.
Run any Volatility plugin with custom arguments.
Find memory dumps in a directory.
