Winforensics

{
  "agent_id": "winforensics_mcp",
  "name": "Winforensics",
  "url": "https://github.com/x746b/winforensics-mcp",
  "logo": "https://github.com/x746b.png?size=200",
  "niche": "incident-investigation",
  "category": "security",
  "short_summary": "MCP server for Windows digital forensics analysis on Linux. Parses EVTX logs, registry hives, PE files, MFT, browser artifacts, and API call captures with MITR…",
  "task_performed": "unclear",
  "inputs_accepted": [],
  "outputs_produced": [],
  "integrations_available": [],
  "protocols_or_interfaces": [
    "MCP"
  ],
  "industry_fit": [],
  "autonomy_level": "unclear",
  "human_approval_needed": "unclear",
  "pricing_model": "unclear",
  "price": {
    "observed": false,
    "billing": "not_found",
    "currency": null,
    "lowest_monthly_usd": null,
    "monthly_usd": null,
    "headline": "No public price found",
    "summary": "No public SaaS pricing is shown; the project is presented as an open-source GitHub repository under an MIT license.",
    "confidence": "medium",
    "source_url": "https://github.com/x746b/winforensics-mcp",
    "checked_at": "2026-10-26T03:54:22.687Z",
    "source_kind": "vendor",
    "amount": null,
    "display": null,
    "plans": [],
    "source": "render+llm"
  },
  "trust_or_rating_signal": [],
  "evidence_quality": "unclear",
  "entity_type": "mcp_server",
  "regulated_data_suitability": "unclear",
  "evidence_urls": [
    "https://github.com/x746b/winforensics-mcp"
  ],
  "last_checked": "2026-10-26",
  "profile_checked": null,
  "price_checked": "2026-10-26",
  "how_to_connect": {
    "website": "https://github.com/x746b/winforensics-mcp",
    "docs": null,
    "mcp": null,
    "a2a": null,
    "api": null,
    "protocols": [
      "MCP"
    ],
    "install": "git clone https://github.com/x746b/winforensics-mcp.git cd winforensics-mcp # Install wit",
    "repository": "https://github.com/x746b/winforensics-mcp",
    "note": "Speaks MCP but publishes no endpoint we could verify — check the docs/website."
  },
  "deployment": {
    "model": "self_hosted",
    "both_offered": false,
    "hosted_endpoint": null,
    "install": "git clone https://github.com/x746b/winforensics-mcp.git cd winforensics-mcp # Install wit",
    "note": "You run it yourself: install from the published command/package; no vendor endpoint found.",
    "evidence": {
      "sources": [
        "page_text:install",
        "page_text:licence"
      ],
      "excerpt": "on3 --version Install from PyPI uv tool install winforensics-mcp Install from source git clone https://github.com/x746b/winforensics-mcp.git cd winforensics-mcp # Install",
      "url": "https://github.com/x746b/winforensics-mcp",
      "observed_day": "2026-10-28",
      "age_days": 2,
      "hosted_evidence": null,
      "rule": "deploy-v1"
    }
  },
  "licence": {
    "name": "MIT",
    "note": "Named licence as published; applies to the code, not to where it runs.",
    "evidence": "page text: \"rver windows-forensics Resources Readme MIT license Activity Stars 25 stars Watc\"",
    "observed_day": "2026-10-28",
    "age_days": 2
  },
  "evidence_checks": {
    "price": {
      "source_url": "https://github.com/pricing",
      "last_observed_day": "2026-09-20",
      "age_days": 40,
      "verified_day": null,
      "note": "not verified by the page-text gate"
    },
    "agent_card": {
      "status": "unknown",
      "note": "no Agent Card URL recorded for this listing"
    },
    "endpoint": {
      "status": "unknown",
      "note": "endpoint not yet checked"
    }
  },
  "product_group": null,
  "liveness": {
    "probed": true,
    "alive": true,
    "endpoint_kind": "site",
    "latency_ms": 223,
    "uptime_7d": 1,
    "checked_at": "2026-10-29T02:47:27.776Z",
    "consecutive_failures": 0,
    "status": "alive"
  },
  "price_extras": {
    "free_tier": null,
    "unit_cost": null
  },
  "reported_success": null,
  "feedback": "If you actually use this provider, call report_outcome with the result. Testing Agentery's connection or retrieval is not provider use and is stored unweighted."
}