Instructions file
Instructions for x746b/winforensics-mcp, covering role: windows dfir specialist, target, winforensics-mcp: orchestrators first, orchestrator parameters (always use) and investigation workflow.
Instructions file
Instructions for x746b/mem_forensics-mcp, covering role: memory forensics specialist, mem-forensics-mcp: triage first, architecture, investigation questions -> tools and workflow.
MCP server Claude CodeCodexCursor +2
Unified Memory Forensics MCP Server - Multi-tier engine (Rust + Python + Vol3). Runs locally from the mem-forensics-mcp Python package.
Instructions file
Instructions for x746b/mac_forensics-mcp, covering macos dfir investigation guide, working directory, investigation objectives, primary analysis method: mac-forensics mcp and why mcp over manual grep?.
MCP server Claude CodeCodexCursor +2
MCP server "macforensicsmcp" as configured in x746b/macforensics-mcp. Runs locally from the mac_forensics_mcp Python package.