CrowdSentinel
AI-powered threat hunting and incident response framework for Elasticsearch and OpenSearch with detection rules, EVTX analysis, an
Connects language models to enterprise security data for natural language threat hunting, AI-guided investigation workflows, and cross-tool IoC correlation. Supports Elasticsearch, OpenSearch, EVTX logs via Chainsaw, and PCAP files via Wireshark with persistent investigation state and multiple security framework mappings including MITRE ATT&CK and Cyber Kill Chain.
Source
Repository: https://github.com/thomasxm/crowdsentinels-ai-mcp
Maintain CrowdSentinel?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[](https://getagentictools.com/mcp/thomasxm-crowdsentinels-ai-mcp?ref=badge) npx agentictools info mcp/thomasxm-crowdsentinels-ai-mcp The second line is the CLI lookup for this page — handy in READMEs and docs.
Related mcp
Portainer Container Management Provides a bridge between AI and Portainer container management platform, enabling environment monitoring, access control manageme
AutoPentest AI Automated web application penetration testing framework implementing OWASP WSTG methodology.
PostgreSQL Database Manager Integrates with PostgreSQL databases to enable schema management, data migration, performance monitoring, and security configurati
Python Code Execution Provides secure Python code execution in a sandboxed Pyodide environment with automatic dependency installation, stdout/stderr cap
AI Infrastructure Agent (AWS) Provides autonomous AWS infrastructure management through natural language processing, combining real-time resource discovery with
Conda Executor Executes Python code within isolated Conda environments, enabling secure and flexible code generation and execution for tasks like