mhaggis-security-detections
Aggregates security detection rules from Sigma, Splunk ESCU, Elastic, and KQL into a unified searchable SQLite database with MITRE ATT&CK mappings and CVE tracking for security analysts and threat hunters.
- Score
- 96.7082 signals
- Evidence
- 478 stars · 75 forks
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · MCPs
- dstreefkerk-ms-sentinel18 stars · 9 forks77.842
- lazy-importer-detect-it-easy13 stars · 4 forks71.077
- security-framework-mcp14 stars · 3 forks70.564
What it is
MCP server Security Detections, catalogued on PulseMCP. Aggregates security detection rules from Sigma, Splunk ESCU, Elastic, and KQL into a unified searchable SQLite database with MITRE ATT&CK mappings and CVE tracking for security analysts and threat hunters.
When to use it
Aggregates security detection rules from Sigma, Splunk ESCU, Elastic, and KQL into a unified searchable SQLite database with MITRE ATT&CK mappings and CVE tracking for security analysts and threat hunters.
Notes
Listed from the PulseMCP registry. The registry does not state a license. Check it before production use.