"author:nks1097" matching MCP servers:

Enables AI agents to connect to Splunk Enterprise through 100 typed, audited tools for SPL searches, SOC operations, threat hunting, dashboards, knowledge management, and cluster diagnostics, with read-only safeguards and human confirmation for destructive actions.

It enables AI agents to securely perform directory administration, automation, security auditing, health diagnostics, and compliance reporting with strict guardrails, write-approval workflows, and immutable audit logs.

Enables AI agents to inspect Suricata IDS/IPS and network security telemetry, analyze EVE JSON and PCAP captures, investigate alerts, manage and validate detection rules, audit sensors, and generate PDF/XLSX/CSV/JSON reports through 100 Portuguese-language tools with RBAC and audit logging.

Enables natural language interaction with Wazuh SIEM for alert querying, threat hunting, vulnerability scanning, and active response actions.

Automated SOC orchestration server integrating Wazuh, TheHive, Cortex, and MISP for AI-driven incident response and SOAR playbooks.

Enables managing security incidents, triage, response, automated analysis via Cortex, and threat intelligence sync with MISP through TheHive 5 API, offering 69 MCP tools.