Skip to main content
Glama
MadameFabulous

Chainsaw MCP Server

by MadameFabulous
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Related Servers

Alternatives to Chainsaw MCP Server

No user-submitted related servers found.

    Related Servers

    • SigmaLineage MCP

      MohitDabas
      F
      license
      B
      quality
      D
      maintenance
      Enables context-aware EVTX hunting with process lineage tracing and rarity baselining to surface real threats from security logs, transforming raw alerts into actionable kill chain intelligence.
      3
      1
      -

    • WinLog-mcp

      XD3an
      A
      license
      Not graded
      quality
      D
      maintenance
      Provides programmatic access to ingest and query Windows event logs (especially Sysmon logs), enabling security monitoring, incident response, and log analysis automation.
      5
      MIT

    • mcp-hayabusa

      SBecraft
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables Windows event log forensics by wrapping Hayabusa, offering EVTX scanning, Sigma rule exploration, ATT&CK coverage analysis, and detection engineering resources.
      MIT

    • Windows Forensics MCP Server

      x746b
      A
      license
      B
      quality
      A
      maintenance
      Enables AI-assisted Windows digital forensics analysis including parsing Windows Event Logs (EVTX), analyzing registry hives (SAM, SYSTEM, SOFTWARE), and remotely collecting artifacts via WinRM with built-in security queries and forensic reference data.
      45
      22
      MIT

    • mcp-hayabusa

      msadigo
      A
      license
      A
      quality
      B
      maintenance
      Enables MCP clients to run Hayabusa detection scans over Windows event log (.evtx) files for forensic analysis and threat hunting.
      2
      MIT

    • mcp-hayabusa

      omeryemba
      A
      license
      A
      quality
      A
      maintenance
      Enables forensic analysis of Windows event logs (.evtx) using Hayabusa, providing tools for timeline generation, threat hunting, and rule updates via MCP.
      17
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.7/5.0

    Scored across 26 tools

    Disambiguation4/5

    Tools are largely distinguished by artifact type and action: EVTX/gap/shimcache/SRUM analyses, hunt/search/dump, rule management, and result management. Some overlap exists among result_page, result_events, result_export, and result_chunk, but the descriptions clarify their distinct purposes.

    Naming Consistency4/5

    All tools use a consistent chainsaw_ prefix and snake_case, making the server easy to navigate. The suffixes mix verb_noun patterns (e.g., chainsaw_delete_rule, chainsaw_analyse_evtx) with noun-first patterns (e.g., chainsaw_rule_stats, chainsaw_result_list), a minor deviation from a strict convention.

    Tool Count3/5

    At 26 tools, the surface is on the heavy side, with eight result_* tools alone. However, the domain is broad—evidence scoping, hunting, multiple artifact analyses, rule lifecycle, and result paging/export—so the count is borderline rather than clearly excessive.

    Completeness4/5

    The set covers evidence listing, hunt/search/dump, targeted artifact analyses, rule reading/searching/saving/deleting/linting/stats, and result listing/paging/chunking/exporting/deleting. Minor gaps include no explicit rule update beyond overwrite-on-save and no analysis tools beyond Chainsaw's supported artifact set.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues

    Resources