thomasxm/CrowdSentinels-AI-MCP
Skill Claude CodeCodex
Use when conducting threat hunting or incident response with CrowdSentinel MCP tools. MANDATORY for any investigation involving Elasticsearch, EQL, ES|QL, or detection rules. Enforces proper use of analysis and reporting tools.
thomasxm/CrowdSentinels-AI-MCP
Skill Claude CodeCodex
Comprehensive threat hunting and incident response skill for CrowdSentinel MCP Server. Provides decision frameworks (MITRE ATT&CK, NIST IR, Pyramid of Pain, Diamond Model), workflow guidance, executable scripts for Elasticsearch queries, field mapping assistance, and debugging tools.
thomasxm/CrowdSentinels-AI-MCP
MCP server Claude CodeCodexCursor +2
AI-powered threat hunting and incident response MCP server for Elasticsearch/OpenSearch with 139 tools, 6,060 detection rules, and baseline behaviour analysis. Runs locally from the crowdsentinel-mcp-server Python package. Needs 8 environment variables to run.