"author:HianSoares" matching MCP servers:

Enables read-only incident investigation by correlating IBM QRadar offenses and associated IPs with Trend Vision One Workbench alerts, endpoint activities, and detections. It produces bounded evidence reports and supports Kiro-led triage through tools such as investigate_case, investigate_offense, and investigate_vision_alert.