A
licenseNot graded
qualityB
maintenanceProvides governed MCP tools for querying optionally restricted Microsoft Sentinel/Log Analytics tables and optional Defender XDR hunting data, retrieving incidents and entities, and—for agent identities only—adding attributed incident comments, with Entra ID authentication, KQL validation, rate limits, and redacted audit logging.
Apache 2.0