mitre-attack agents

CSOAI-ORG/mitre-attack-mcp

Cursor rule Cursor

When the user asks about MITRE ATT&CK, tactics, techniques, threat intel, STIX, IOC, use mitre-attack-mcp tools.

CSOAI-ORG/mitre-attack-mcp

MCP server Claude CodeCodexCursor

MCP server "mitre-attack-mcp" as configured in CSOAI-ORG/mitre-attack-mcp. Runs locally from the mitre-attack-mcp Python package.

drummer475-94/secops-agent-triage

MCP server Claude CodeCodexCursor +2

MCP server "secops-agent-triage" as configured in drummer475-94/secops-agent-triage. Runs locally from the secops-agent-triage Python package.

threadlinqs-cmd/intelthreadlinqs-mcp

Plugin Claude Code

Curated cyber-threat intelligence in Claude — 81 read-only tools across threats, SPL/KQL/Sigma detections, IOCs, MITRE ATT&CK, CVE/CWE, C2 infrastructure, and threat-actor attribution. Purple/Gold tier.

threadlinqs-cmd/intelthreadlinqs-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Threadlinqs Intelligence Platform — 81 tools, 25 prompts and 14 resources across threat intel, detections, IOCs, actors, C2, MITRE chains, correlations and Purple-tier composite intelligence. Runs locally from the intelthreadlinqs-mcp npm package. Needs 1 environment variable to run.

threadlinqs-cmd/intelthreadlinqs-mcp

Skill Claude CodeCodex

Operate the Threadlinqs Intelligence MCP server — 73 threat-intelligence tools covering threats, detection rules in Splunk SPL / Microsoft KQL / Sigma, IOCs, threat actors, CVE/CWE enrichment, MITRE ATT&CK coverage and prediction, C2 infrastructure, the correlation graph, and STIX 2.1 / ATT&CK Navigator export. Use…

threadlinqs-cmd/intelthreadlinqs-mcp

MCP server Claude CodeCodexCursor +2

Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs. Runs locally from the intelthreadlinqs-mcp npm package. Needs 2 environment variables to run.