threadlinqs-cmd

threadlinqs-cmd/Threadlinqs-Security-Detection-MCP

Cursor rule Cursor

Cursor rule "contentctl-path" from threadlinqs-cmd/Threadlinqs-Security-Detection-MCP, covering contentctl tool configuration (splunk-specific), location, pip install requirements, option 1: force reinstall and option 2: direct pypi url.

threadlinqs-cmd/Threadlinqs-Security-Detection-MCP

Cursor rule Cursor

The tests: section MUST have valid URLs, NOT placeholder descriptions.

threadlinqs-cmd/Threadlinqs-Security-Detection-MCP

Cursor rule Cursor

Linux detection testing workflow and lessons learned.

threadlinqs-cmd/Threadlinqs-Security-Detection-MCP

Cursor rule Cursor

Any pip install command MUST include one of these options.

threadlinqs-cmd/Threadlinqs-Security-Detection-MCP

Cursor rule Cursor

Self-healing behavior - automatically fix errors and continue.

threadlinqs-cmd/Threadlinqs-Security-Detection-MCP

Cursor rule Cursor

Detection validation tools - location, usage, and multi-SIEM support.

threadlinqs-cmd/Threadlinqs-Security-Detection-MCP

MCP server Claude CodeCodexCursor +2

Advanced MCP server for security detections with Detection Engineering Intelligence, Knowledge Graph (Tribal Knowledge), Elicitation, and Resource Subscriptions. Runs locally from the security-detections-mcp npm package. Needs 5 environment variables to run.

threadlinqs-cmd/intelthreadlinqs-mcp

Plugin Claude Code

Bundles 1 MCP server

Curated cyber-threat intelligence in Claude — 81 read-only tools across threats, SPL/KQL/Sigma detections, IOCs, MITRE ATT&CK, CVE/CWE, C2 infrastructure, and threat-actor attribution. Purple/Gold tier.

threadlinqs-cmd/intelthreadlinqs-mcp

Skill Claude CodeCodex

Operate the Threadlinqs Intelligence MCP server — 73 threat-intelligence tools covering threats, detection rules in Splunk SPL / Microsoft KQL / Sigma, IOCs, threat actors, CVE/CWE enrichment, MITRE ATT&CK coverage and prediction, C2 infrastructure, the correlation graph, and STIX 2.1 / ATT&CK Navigator export. Use…

threadlinqs-cmd/intelthreadlinqs-mcp

MCP server Claude CodeCodexCursor +2

Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs. Runs locally from the intelthreadlinqs-mcp npm package. Needs 2 environment variables to run.