MemProcFS-mcp-server

MCP server for Windows memory forensics. Provides AI agents with 33 tools for analyzing memory dumps using Volatility 3, MemProcFS, and CLR/SOS backends. Includes process analysis, malware detection, staged payload reconstruction, and YARA scanning.

Linux-native MCP server for PCILeech/MemProcFS DMA memory operations. 21 tools for memory R/W, process enumeration, AOB scanning, module dumping, pointer chains, FPGA config. Built for Claude Code.