Amier-ge/NTFS_Parser_MCP
3.2
If you are the rightful owner of NTFS_Parser_MCP and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to dayong@mcphub.com.
The NTFS Parser MCP Server provides forensic parsing capabilities for NTFS file systems through a Model Context Protocol server.
Tools
Functions exposed to the LLM to take actions
parse_mft
$MFT (Master File Table) parsing
parse_usnjrnl
$UsnJrnl:$J (USN Journal) parsing
parse_logfile
$LogFile (Transaction Log) parsing
extract_from_image
Extract artifacts from disk image
extract_and_analyze
Extract and analyze artifacts in one step
analyze_artifacts
Integrated analysis of multiple artifacts
get_info
Retrieve tool information
Prompts
Interactive templates invoked by user choice
No prompts
Resources
Contextual data attached and managed by the client