Netforensicmcp
NetForensicMCP V2.1 is a Model Context Protocol (MCP) server designed to empower Large Language Models (LLMs) with advanced offline network traffic analysis and threat intelligence capabilities. Built on top of Wireshark's tshark, NetForensicMCP provides comprehensive PCAP analysis tools for cybersecurity professionals, threat hunters, and network forensics investigators.
Overview
What is NetForensicMCP?
NetForensicMCP V2.1 is a Model Context Protocol (MCP) server designed to empower Large Language Models (LLMs) with advanced offline network traffic analysis and threat intelligence capabilities, built on top of Wireshark's tshark.
How to use NetForensicMCP?
To use NetForensicMCP, clone the repository from GitHub, install the necessary dependencies using npm, and launch the MCP server with the command node index.js.
Key features of NetForensicMCP?
- Smart Stream Analysis for handling large PCAP files
- Threat Intelligence Integration with URLhaus blacklist checking
- Automated Credential Extraction across multiple protocols
- High-Frequency IP Analysis for proactive threat hunting
Use cases of NetForensicMCP?
- Proactive threat hunting for APT activities
- Rapid forensic analysis during incident response
- Compliance auditing for credential leak detection
- Automated IOC extraction and attack reconstruction
FAQ from NetForensicMCP?
- What operating systems are supported?
Windows, macOS, and Linux are supported.
- Is Wireshark required?
Yes, Wireshark (tshark) must be installed and in the system PATH.
- Can it handle large PCAP files?
Yes, it features intelligent content chunking to manage large files efficiently.
Server Config
{
"mcpServers": {
"NetForensicMCP": {
"command": "node",
"args": [
"index.js"
]
}
}
}Project Info
Created At
9 months agoUpdated At
9 months agoAuthor Name
kylecuiStar
-Language
-License
-Category
research-and-data
Recommend Servers
View AllSerper MCP Server
@garymengcom
A Serper MCP Server
Python
a year ago
Memory
@modelcontextprotocol
a year ago
虎嗅嗅 Ai行业参谋
34 minutes ago
Amap Maps
@amap
高德地图官方 MCP Server
a year ago
Playwright Mcp
@microsoft
Playwright MCP server
TypeScript
10 months ago
Mcp Server Chatsum
@chatmcp
summarize chat message
typescript
a year ago
Test
@modelcontextprotocol
test
6 months ago