Skip to main content
Glama
WRG-11

wrg-sigma-rules

by WRG-11
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Related Servers

Alternatives to wrg-sigma-rules

No user-submitted related servers found.

    Related Servers

    • RSigma

      timescale
      A
      license
      A
      quality
      A
      maintenance
      RSigma is a Rust detection-engineering toolkit for the Sigma standard. Its MCP server (rsigma mcp serve) exposes the toolchain to AI agents over stdio or Streamable HTTP, with tools to author, lint, validate, and convert Sigma rules, evaluate and explain detections against log events, and inspect correlation state.
      15
      144
      MIT

    • Wazuh SIEM Agent System

      flybfree
      F
      license
      Not graded
      quality
      D
      maintenance
      A Claude-powered MCP tool suite for interacting with a Wazuh SIEM manager, enabling triage, health monitoring, threat hunting, rule management, and active response execution.
      -

    • Wazuh MCP Server

      INFOKOM-KI
      A
      license
      Not graded
      quality
      B
      maintenance
      A defensive MCP server for Claude Desktop / any MCP client — the blue-team counterpart to offensive tooling. 123 tools + 4 resources across Wazuh SIEM, multi-provider threat intelligence, MITRE-driven 3-Sum APT correlation, attack graphing, LangGraph investigation workflows, and host forensics. Read-only by default.
      58
      BSD 3-Clause

    • cybersec-mcp

      xu-c0
      F
      license
      Not graded
      quality
      D
      maintenance
      Enables Claude or any MCP-compatible client to execute cybersecurity workflows like incident response, cloud audits, and pentests by calling tools with 323 prompts across 8 categories.
      1
      -

    • wazuh-mcp-soc

      cisse-lalya
      F
      license
      Not graded
      quality
      C
      maintenance
      Enables natural-language security operations by connecting Wazuh SIEM to Claude Desktop via MCP, allowing querying of alerts, agents, vulnerabilities, and generating security reports with Slack integration.
      1
      -
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A4.3/5.0

    Scored across 3 tools

    Disambiguation5/5

    Each tool has a clear, non-overlapping purpose: drafting, validating, and converting Sigma rules. There is no ambiguity between them.

    Naming Consistency5/5

    All tool names follow the consistent verb_noun pattern (convert_rule, draft_rule, validate_rule), making them predictable and easy to understand.

    Tool Count5/5

    Three tools perfectly cover the core lifecycle of Sigma rules (create, validate, convert) without being too few or excessive.

    Completeness5/5

    The tool set provides a complete workflow for handling Sigma rules: drafting from description, validating for correctness, and converting to SIEM queries. No obvious gaps exist.

    Maintenance

    ActivityActive
    ResponsivenessNo issues

    Resources