This project bridges the powerful memory forensics capabilities of the Volatility 3 Framework with Large Language Models (LLMs) through the Model Context Protocol (MCP). It allows you to perform memory forensics analysis using natural language by exposing Volatility plugins as MCP tools that can be invoked directly by Claude or other MCP-compatible LLMs.
暂无评论. 成为第一个评论的人！
登录以参与讨论
Highlight AIShows all Volatility plugins you can use.
Provides information about a memory dump file.
Shows the process hierarchy.
Lists processes from the process list.
Scans for processes including ones that might be hidden.
Shows network connections in the memory dump.
Detects potential code injection.
Shows command line arguments for processes.
Lists loaded DLLs for processes.
Shows file handles and other system handles.
Scans for file objects in memory.
Shows the memory map for a specific process.
Run any Volatility plugin with custom arguments.
Find memory dumps in a directory.
