Armory
Source
Browse
MCPs

splunk-mcp-for-soc-operations

Enables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.

Score
41.0822 signals
Evidence
1 star · 2 forks
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. arkana211 stars · 18 forks93.413
  2. livehybrid-splunk107 stars · 47 forks93.328
  3. spathodea-network-opencti40 stars · 18 forks86.262

What it is

Enables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.

When to use it

Enables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.

How to install / invoke

See Glama for the install config.

Notes

Listed from the Glama MCP registry.