MCP server exposing Wazuh SIEM (manager + indexer) operations to AI clients, with false-positive rule-tuning tooling and an Atomic Red Team integration layer.
This repository also configures its own agents. See what ai-detection-engineering-platform tells them →
Simoon896/ai-detection-engineering-platform
Cursor rule Cursor
Safety constraints for Atomic Red Team detonation via atomic-redteam MCP. Apply when running ART tests, using runatomic, or working under tools/redteam/.
Simoon896/ai-detection-engineering-platform
Cursor rule Cursor
Wazuh detection engineer behavior after Atomic Red Team handoff. Apply when correlating ART runs with alerts, tuning rules, or updating tools/redteam/coverage.md.