MHaggis/Security-Detections-MCP
An MCP server that lets LLMs query a unified database of security detection rules from Sigma, Splunk, Elastic, KQL, Sublime, and CrowdStrike.
Not currently ranked — collecting fresh signals.
star history
This Model Context Protocol server exposes 81 tools enabling AI agents to search, retrieve, and query security detection rules across multiple security platforms. It indexes rule repositories locally or provides access via a hosted HTTP endpoint, allowing LLMs to leverage structured detection logic for cybersecurity tasks.
Frequently asked
- What is MHaggis/Security-Detections-MCP?
- An MCP server that lets LLMs query a unified database of security detection rules from Sigma, Splunk, Elastic, KQL, Sublime, and CrowdStrike.
- Is Security-Detections-MCP open source?
- Yes — MHaggis/Security-Detections-MCP is an open-source project tracked on heatdrop.
- What language is Security-Detections-MCP written in?
- MHaggis/Security-Detections-MCP is primarily written in TypeScript.
- How popular is Security-Detections-MCP?
- MHaggis/Security-Detections-MCP has 457 stars on GitHub.
- Where can I find Security-Detections-MCP?
- MHaggis/Security-Detections-MCP is on GitHub at https://github.com/MHaggis/Security-Detections-MCP.