heejung0/sleuthkit-mcp-server
If you are the rightful owner of sleuthkit-mcp-server and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to dayong@mcphub.com.
The Sleuth Kit MCP Server exposes Sleuth Kit CLI tools as a Model Context Protocol (MCP) server, enabling analysis and extraction of files from filesystem images via MCP clients.
Tools
Functions exposed to the LLM to take actions
sleuthkit_healthcheck
Checks the installation status of Sleuth Kit binaries.
disk_info
Uses file command and mmstat to check disk image file information.
disk_partition_info
Analyzes disk partition information using mmls.
search_inode_by_path
Finds inode number of a folder by searching paths with ifind.
files_in_directory
Lists contents of a folder using fls.
extract_files_by_inode
Extracts files using inode numbers with icat.
extract_directory_tree_by_inode
Extracts files while maintaining original directory structure using icat.
istat_metadata
Retrieves metadata of files based on inode using istat.
Prompts
Interactive templates invoked by user choice
No prompts
Resources
Contextual data attached and managed by the client