Security and IT teams that analyze memory images from suspected incidents and want to query them from an AI assistant.
claude mcp add vol -- python /ABSOLUTE_PATH_TO_MCP-SERVER/vol_mcp_server.py -i /ABSOLUTE_PATH_TO_MEMORY_IMAGE/<memory_image>Third party software. By copying, downloading or installing it you accept the Academy legal notice: you are responsible for reviewing its code and permissions before use.
Loading the file...
Runs Volatility 3 memory forensics through a FastAPI server. Plugins such as pslist and netscan are exposed as REST endpoints, so an MCP client like Claude Desktop can query a memory image. A web front end for interactive analysis is planned for later.
Security and IT teams that analyze memory images from suspected incidents and want to query them from an AI assistant. Runs Volatility 3 memory forensics through a FastAPI server. Plugins such as pslist and netscan are exposed as REST endpoints, so an MCP client like Claude Desktop can query a memory image. A web front end for interactive analysis is planned for later.
Run this in your terminal: claude mcp add vol -- python /ABSOLUTE_PATH_TO_MCP-SERVER/vol_mcp_server.py -i /ABSOLUTE_PATH_TO_MEMORY_IMAGE/<memory_image>
Yes. The code is on GitHub (Gaffx/volatility-mcp) under the Apache-2.0 licence.
It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.