EZ Tools MCP Server는 Eric Zimmerman's Tools에서 제공되는 도구들을 Model Context Protocol (MCP) 서버 형태로 노출합니다. 이를 통해 Cursor, Claude Desktop 등 MCP 클라이언트에서 Windows Artifact(Prefetch, EventLog, Registry) 를 분석할 수…
Ez Tools Mcp Server is an MCP project maintained in the heejung0/ez-tools-mcp-server repository. The maintainer describes its purpose as “EZ Tools MCP Server는 Eric Zimmerman's Tools에서 제공되는 도구들을 Model Context Protocol (MCP) 서버 형태로 노출합니다. 이를 통해 Cursor, Claude Desktop 등 MCP 클라이언트에서 Windows…”. Read the project documentation for the complete scope.
The project provides a local client configuration using /path/to/.venv/Scripts/python. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.
The example declares PECMD_EXE, EVTX_EXE, RECMD_EXE. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| ez_tools_healthcheck | Eric Zimmerman's Tools 바이너리 설치 상태 점검 |
| prefetch_dir_parser | Prefetch 파일이 들어있는 폴더 분석 |
| prefetch_file_parser | Prefetch 파일 분석 |
| eventlog_dir_parser | Windows Eventlog 파일이 들어있는 폴더 분석 |
| eventlog_file_parser | Windows Eventlog 파일 분석 |
| registry_total_parser | DFIRBatch.reb 배치 파일을 사용하여 Registy 하이브 전체 분석 |
| registry_plugin_parser | 특정 Batch 파일 또는 하이브 파일 개별 분석 |
| list_batches | RECmd BatchExamples 폴더 내에 있는 배치 파일 목록 조회 |
{
"mcpServers": {
"ez-tools-MCP": {
"command": "/path/to/.venv/Scripts/python",
"args": [
"/path/to/EZ_tools_mcp_server.py"
],
"env": {
"PECMD_EXE": "/path/to/PECmd.exe",
"EVTX_EXE": "/path/to/EvtxECmd.exe",
"RECMD_EXE": "/path/to/RECmd.exe"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
| Variable | Description | Required |
|---|---|---|
| PECMD_EXE | Declared in the maintainer’s client configuration. | Check documentation |
| EVTX_EXE | Declared in the maintainer’s client configuration. | Check documentation |
| RECMD_EXE | Declared in the maintainer’s client configuration. | Check documentation |
Generates both vector and raster images using EverArt's AI models, providing flexible storage and format conversion.
Provides file system operations, analysis, and manipulation through a standardized tool interface.
1AIVault is a local-first desktop app that acts as a portable memory vault for AI tools. It stores your memories, decisions, preferences, and reusable skills in a local SQLite database and exposes…
A Model Context Protocol server
Expose the 5dive agent-fleet CLI as Model Context Protocol tools. Point any MCP client (Claude Desktop, Cursor, Cline, or your own) at this stdio server to file tasks, inspect and message agents, and read the fleet…
Automated DOCX Redlining Engine