Security Infrastructure

This security infrastructure MCP server provides unified access to three major security platforms - Splunk SIEM, CrowdStrike EDR, and Microsoft MISP - through a comprehensive web interface and backend API integration. Built with Python async/await patterns and featuring both MCP server implementations and a React-based documentation frontend, it enables security analysts to perform cross-platform threat hunting, search security events, retrieve detections, and query threat intelligence through natural language interactions. The implementation includes Docker containerization, comprehensive test coverage, and a live documentation site with interactive code examples, making it valuable for SOC operations where analysts need to correlate data across multiple security tools without switching between different vendor interfaces.