Windows Forensics
Rank #37,906pulsemcp/jus1-c-windows-forensics
Local-first MCP server for analyzing Windows forensic artifacts — event logs, registry hives, prefetch files, NTFS metadata, and DPAPI encryption artifacts — directly from the filesystem.
Windows Forensics is a Model Context Protocol (MCP) server published by jus1-c. It ranks #37,906 of 76,851 servers tracked on MCP Toplist. Windows Forensics is listed on PulseMCP, and ships as a single rolling release with no explicit version metadata. It was first listed on Jun 9, 2026.
Ranks ahead of 38,945 of 76,851 servers on MCP Toplist.
Listed on 1 registry
jus1-c
Other servers by jus1-c
- disk-forensics-mcp-server#14,083 · 2 vers
- network-forensics-mcp-server#25,117 · 2 vers
- mem-forensics#31,182
- Forensics Utils MCP Server#39,678
Not versioned
This server is published through a registry that does not expose explicit version metadata, and no GitHub release tags were found on the linked repository. The listing tracks a single rolling release.
Frequently asked questions
- Who maintains Windows Forensics?
- Windows Forensics is maintained by jus1-c, which publishes 5 MCP servers (4 total versions) tracked on MCP Toplist.
- Is Windows Forensics listed on the Official MCP Registry?
- Windows Forensics is not on the Official MCP Registry. It is listed on PulseMCP.
- How many versions does Windows Forensics have?
- Windows Forensics ships as a single rolling release with no explicit version metadata.
- Where can I find the source code for Windows Forensics?
- The source code for Windows Forensics is hosted at github.com/jus1-c/windows-forensics-mcp-server.