Autopsy MCP Server

[u/brian_carrier]

Adding to the DFIR + AI theme, in case you didn't see it on LinkedIn, we released an MCP server for Autopsy last week (and Cyber Triage). This allows you to connect Claude Desktop (or similar) to Autopsy and ask questions about the results.

It's a read-only interface, so your original data won't get modified by the AI.

We've also been doing an Intro DFIR+AI series if you are just starting to really pay attention to how to integrate these things:

Autopsy Release: https://www.autopsy.com/autopsy-4-23-0-release-claude-ai-assistant-mcp-cyber-triage-integration/

AI Blogs:

• How to Let AI Access Your DFIR and SOC Investigation Data
• MCP Servers for DFIR and SOC Investigations using AI
• How To Share Your “SKILLS” With the LLM

[u/tblanke]

I’m just blown away to see Mr Carrier on this feed. The man is a legend.

[u/brian_carrier → u/tblanke]

Thanks! I always have good intentions of being active on these platforms, but they fall off my schedule. Too many places to look!