- Conduid
- Marketplace
- #sigma
MCP servers tagged sigma
7 live MCP servers tagged "sigma", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with sigma.
Rsigma
A complete Sigma detection toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:
AI Dfir Toolkit
A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider t…
Agentic Dart
Automate digital forensics and incident response tasks using an autonomous agent aligned with MITRE ATT&CK frameworks.
Hayabusa
MCP server wrapping the Hayabusa Windows event log forensic analysis CLI for AI-assisted threat hunting.
Agentic Dfir
Agentic-DFIR — autonomous digital forensics & incident response agent. Architecture-first, not prompt-first: typed read-only MCP tool surface, SHA-256 audit chain, senior-analyst…
Detection Lab
Detection-engineering for MCP: working Sigma rules for the OWASP MCP Top 10 + isolated home-lab + zero-dependency validator (git clone && python3 validate.py).
Threat Detection Lab
Agent exposure review ("what changes if I add this tool to my agent?"), a deterministic detection-boundary harness, and a CTI pipeline. Public data only; every figure measured.