Procmon
18-tool Windows process monitoring MCP server for security researchers, covering ETW tracing, PE analysis, event logs, services, a
Provides AI assistants with deep access to Windows internals through 18 tools spanning live process state monitoring, ETW kernel tracing, PE file import/export analysis, Windows Event Log retrieval, service enumeration, driver inspection, and minifilter analysis. Designed for security researchers and reverse engineers working on controlled systems. Published on PyPI as procmon-mcp and executable via uvx without installation; requires Windows administrator privileges.
Source
Repository: https://github.com/0xhackerfren/procmon-mcp
Maintain Procmon?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[Procmon on getagentictools](https://getagentictools.com/mcp/0xhackerfren-procmon-mcp?ref=badge) Related mcp
Frida Game Hacking Provides Cheat Engine-like game hacking capabilities through Frida dynamic instrumentation for memory scanning, value modification
Frida Agent AI-driven Android dynamic analysis tool wrapping Frida for automated reverse engineering with device management, script injection,
IDA Pro Multi-Session Bridges IDA Pro's reverse engineering capabilities with language models through a multi-session architecture that enables concurre
Java Class Analyzer Analyzes and decompiles Java class files with CFR decompiler integration, Maven repository support, and dependency scanning to ena
GDB Debugger Integrates GDB with AI capabilities to provide interactive debugging assistance for C/C++ applications, enabling breakpoint manage
x64dbg AI-powered reverse engineering and debugging interface for the x64dbg debugger with breakpoints, memory analysis, and tracing.