10 tagged digital-forensics, measured the same way as everything else here.
Browse within: dfir 8forensics 8ai-forensics 6human-in-the-loop 6
MCP server Claude CodeCodexCursor +2
One of 6 in .mcp.json
MCP server "findevil-mcp" as configured in TimothyVang/verdict-dfir. Launched with bash scripts/run-mcp-rust.sh.
MCP server Cursor
MCP server "case-uco", hosted remotely at 127.0.0.1, as configured in vulnmaster/CASE-UCO-SDK.
MCP server Claude CodeCodexCursor +2
Steganography analysis MCP server — 128 tools, 17 categories. Image steganalysis, JPEG/F5/JSteg detection, audio steganography, video stego, GIF palette analysis, network covert channels, MP3 stego, spread spectrum, BPCS, archive stego, QR code analysis. Runs locally from the steganography-mcp npm package.
MCP server Claude CodeCodexCursor +2
MCP server "savvydfir" as configured in kismatkunwar89/SAVVYDFIR-MCP. Runs sift_mcp.server with ./venv/bin/python3. Needs 4 environment variables to run.
MCP server Claude CodeCodexCursor +2
MCP server "hayabusa" as configured in omeryemba/mcp-hayabusa. Launched with mcp-hayabusa.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: