Armory
Source
Browse
MCPs

dstreefkerk-ms-sentinel

Integrates with Microsoft Sentinel to enable security analysts to execute KQL queries, manage analytics rules, investigate incidents, and perform threat intelligence lookups directly from their AI environment.

Score
77.8422 signals
Evidence
18 stars · 9 forks
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. mhaggis-security-detections478 stars · 75 forks96.708
  2. crowdstrike-falcon243 stars · 80 forks95.601
  3. thomasxm-crowdsentinel206 stars · 32 forks94.345

What it is

MCP server Microsoft Sentinel, catalogued on PulseMCP. Integrates with Microsoft Sentinel to enable security analysts to execute KQL queries, manage analytics rules, investigate incidents, and perform threat intelligence lookups directly from their AI environment.

When to use it

Integrates with Microsoft Sentinel to enable security analysts to execute KQL queries, manage analytics rules, investigate incidents, and perform threat intelligence lookups directly from their AI environment.

Notes

Listed from the PulseMCP registry. The registry does not state a license. Check it before production use.