Threat Research

2

Extract IOCs, map MITRE ATT&CK techniques, enrich with threat intelligence, and generate Sigma/KQL/SPL detection rules from threat reports.

GitHub
Category MCP Servers
Language Python
License MIT
Added Apr 23, 2026
Views 57

About

Threat Research MCP automates defensive security analysis workflows. It extracts indicators of compromise from text using regex patterns, enriches them against VirusTotal, AlienVault OTX, and other sources with confidence scoring, maps MITRE ATT&CK technique IDs, and generates detection rules in Sigma, Splunk SPL, Microsoft Sentinel KQL, and Elastic formats. Uses LangGraph for multi-agent orchestration across the analysis pipeline.

Is this your product? Claim this listing with an email at your domain to post updates.

Is this your project?

Claim this listing to manage your page, access analytics, and unlock upgrades. Verification takes 60 seconds.

Log In to Claim

Share This Project

Share on X Share on LinkedIn

Embed Badge

Add this badge to your README:

[![Listed on AiList](https://hifriendbot.com/ai-list/badge/threat-research.svg)](https://hifriendbot.com/ai-list/threat-research/)
Listed on AiList

Compare

Threat Research vs Security Detections Threat Research vs MITRE ATT&CK Threat Research vs OPTIX

Similar Projects

Security Detections

345

Aggregates security detection rules from Sigma, Splunk ESCU, Elastic, and KQL into a unified searchable SQLite database with MITRE ATT&CK mappings and CVE tracking for security analysts and threat hunters.

Web Apps

MITRE ATT&CK

3

Comprehensive threat intelligence framework access with techniques, groups, and software entries

Libraries

OPTIX

MCP server for OPTIX threat intelligence with 28 analyst-friendly tools for querying threat feeds, watchlists, detection rules, and intelligence reports.

MCP Servers

List Your Project

Join the directory Ai agents read. Free forever.

Submit Your Project