velociraptor-mcp
A proof-of-concept MCP bridge that exposes Velociraptor's forensic triage tools to LLMs, enabling natural language querying of Windows endpoints for artifacts like network connections and suspicious processes.
- Score
- 91.2712 signals
- Evidence
- 94 stars · 22 forks
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · MCPs
- eversinc33-triage-pe-file-analysis78 stars · 6 forks86.621
- hmlyn-sunnynet42 stars · 10 forks84.942
- hexastrike-eventwhisper49 stars · 7 forks84.595
What it is
A proof-of-concept MCP bridge that exposes Velociraptor's forensic triage tools to LLMs, enabling natural language querying of Windows endpoints for artifacts like network connections and suspicious processes.
When to use it
A proof-of-concept MCP bridge that exposes Velociraptor's forensic triage tools to LLMs, enabling natural language querying of Windows endpoints for artifacts like network connections and suspicious processes.
How to install / invoke
See Glama for the install config.
Notes
Listed from the Glama MCP registry.