AgentCC
Provides an MCP server for Windows forensics: EVTX parsing, registry analysis, and remote artifact collection.