"author:andrewbrooks" matching MCP servers:

Enables an MCP client to write, validate, run, explain, and tune Snort 3 detections against packet captures on disk offline, with every change verified by real engine runs and recorded in exportable case reports.