广告合作
MCP.so
登录
W

Winlog MCP Server

@XD3an

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

XD3an

提交者

XD3an

关于 Winlog MCP Server

A Model Context Protocol (MCP) tool for retrieving and analyzing Windows event logs (e.g. Sysmon). WinLog-mcp provides programmatic access to ingest and query Windows event logs, making it ideal for security monitoring, incident response, and log analysis automation.

#winlog-mcp#cybersecurity#log-analysis

Winlog MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "winlog-mcp": {
      "command": "python",
      "args": [
        "\\PATH\\TO\\main.py",
        "--storage-path",
        "\\PATH\\TO\\logs\\"
      ]
    }
  }
}

Winlog MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Winlog Mcp?

Winlog Mcp is a Model Context Protocol (MCP) tool for retrieving and analyzing Windows event logs (e.g., Sysmon). It provides programmatic access to ingest and query logs, making it useful for security monitoring, incident response, and log analysis automation.

How to use Winlog Mcp?

Install dependencies with pip install -r requirements.txt, then run the server using python main.py --storage-path \\PATH\\TO\\logs\\. Configure MCP clients (e.g., Claude Desktop) by adding the command and arguments to the appropriate configuration file. Two tools are available: ingest_syslog for ingesting recent Sysmon logs and query_syslog for querying logs by timestamp.

Key features of Winlog Mcp

  • Ingest Windows Sysmon logs and store as files
  • Query logs by timestamp for recent events
  • Seamless interoperability with MCP tools and ecosystem
  • Log files named <timestamp>_<log_type>.log

Use cases of Winlog Mcp

  • Security monitoring and incident response via Sysmon analysis
  • Automated log analysis and troubleshooting
  • Querying recent event entries for investigation

常见问题

1

What are the system requirements?

Windows operating system, Python 3.7 or higher, and the pywin32 dependency are required.

2

How are logs stored?

Logs are stored as files named `<timestamp>_<log_type>.log` in a user-defined storage directory.

3

What tools does Winlog Mcp provide?

Two tools: `ingest_syslog` ingests recent Sysmon logs and writes them to a file; `query_syslog` queries ingested logs by timestamp and returns recent events.

4

How do I integrate Winlog Mcp with Claude Desktop?

Add the configuration to `%APPDATA%\Claude\claude_desktop_config.json` with the command `python` and arguments including the path to `main.py` and the `--storage-path` flag.

5

Does Winlog Mcp require Sysmon to be installed?

Yes, the README provides a Sysmon installation guideline and an `install.bat` script, indicating Sysmon should be installed before using the tool.

评论

开发工具 分类下的更多 MCP 服务器

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

1

Capgo MCP

Cap-go

Console, Backend and CLI to manage Capgo Instant update and Native build for Capacitor apps Build and upload to app store your mobile app

directree

coburn2716

directree MCP server — query the honest software directory from any AI assistant

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

3

Yocoolab

Yocoolab

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools

1
广告合作