"author:ahmed35636" matching MCP servers:

A read-only MCP telemetry server that lets an agent investigate Windows hosts by pulling process lineage, network connections, behavior-specific detections, and local threat-intelligence matches from exported Sysmon snapshots. Queries are bounded and evidence-referenced, enabling a prioritized case report along with the exact tool-call trace.