"author:1907670605" matching MCP servers:

RSigma is a Rust detection-engineering toolkit for the Sigma standard. Its MCP server (rsigma mcp serve) exposes the toolchain to AI agents over stdio or Streamable HTTP, with tools to author, lint, validate, and convert Sigma rules, evaluate and explain detections against log events, and inspect correlation state.

Enables agents to triage Windows EVTX event logs, hunt with Sigma and Chainsaw rules, detect log tampering and timeline gaps, and author or lint detection rules. Results are returned as server-minted handles with paged summaries so tens of thousands of detections can be worked through without pulling raw logs into context.

Enables AI assistants to query company logs, databases, caches, and config centers (e.g., Aliyun SLS, MySQL, Redis, Nacos) through local MCP servers, with read-only enforcement and SSH tunneling for production access.