12 tagged forensics, measured the same way as everything else here.
Browse within: dfir 10digital-forensics 8ai-forensics 6human-in-the-loop 6
MCP server Claude CodeCodexCursor +2
One of 6 in .mcp.json
MCP server "findevil-mcp" as configured in TimothyVang/verdict-dfir. Launched with bash scripts/run-mcp-rust.sh.
MCP server Claude CodeCodexCursor +2
Steganography analysis MCP server — 128 tools, 17 categories. Image steganalysis, JPEG/F5/JSteg detection, audio steganography, video stego, GIF palette analysis, network covert channels, MP3 stego, spread spectrum, BPCS, archive stego, QR code analysis. Runs locally from the steganography-mcp npm package.
MCP server Claude CodeCodexCursor +2
Unified Memory Forensics MCP Server - Multi-tier engine (Rust + Python + Vol3). Runs locally from the mem-forensics-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server "savvydfir" as configured in kismatkunwar89/SAVVYDFIR-MCP. Runs sift_mcp.server with ./venv/bin/python3. Needs 4 environment variables to run.
MCP server Claude CodeCodexCursor +2
Find what broke in your agent calls. Pin it and CI stays red until you fix it. Local call forensics and regression guards for AI agents: turn timing, and whether the agent did what it said. Nothing leaves your machine. Runs locally from the hotato Python package.
MCP server Claude CodeCodexCursor +2
MCP server "evidencegene" as configured in FUYOH666/evidencegene-court. Runs locally from the evidencegene Python package.
MCP server Claude CodeCodexCursor +2
MCP server "verdict-dfir" as configured in tejcodes-rex/verdict. Runs locally from the verdict-dfir Python package.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: