Armory
Source
Browse
MCPs

sigmalineage-mcp

Enables context-aware EVTX hunting with process lineage tracing and rarity baselining to surface real threats from security logs, transforming raw alerts into actionable kill chain intelligence.

Score
22.5571 signal
Evidence
1 star
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. unmuktoai-wazuh241 stars · 64 forks95.410
  2. thomasxm-crowdsentinel206 stars · 32 forks94.345
  3. nikolai-vysotskyi-trace102 stars · 15 forks90.829

What it is

Enables context-aware EVTX hunting with process lineage tracing and rarity baselining to surface real threats from security logs, transforming raw alerts into actionable kill chain intelligence.

When to use it

Enables context-aware EVTX hunting with process lineage tracing and rarity baselining to surface real threats from security logs, transforming raw alerts into actionable kill chain intelligence.

How to install / invoke

See Glama for the install config.

Notes

Listed from the Glama MCP registry.