"author:MadameFabulous" matching MCP servers:

Enables agents to triage Windows EVTX event logs, hunt with Sigma and Chainsaw rules, detect log tampering and timeline gaps, and author or lint detection rules. Results are returned as server-minted handles with paged summaries so tens of thousands of detections can be worked through without pulling raw logs into context.