广告合作
MCP.so
登录
W

Winlog MCP Server

@XD3an

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

XD3an

提交者

XD3an

关于 Winlog MCP Server

A Model Context Protocol (MCP) tool for retrieving and analyzing Windows event logs (e.g. Sysmon). WinLog-mcp provides programmatic access to ingest and query Windows event logs, making it ideal for security monitoring, incident response, and log analysis automation.

#winlog-mcp#cybersecurity#log-analysis

Winlog MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "winlog-mcp": {
      "command": "python",
      "args": [
        "\\PATH\\TO\\main.py",
        "--storage-path",
        "\\PATH\\TO\\logs\\"
      ]
    }
  }
}

Winlog MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Winlog Mcp?

Winlog Mcp is a Model Context Protocol (MCP) tool for retrieving and analyzing Windows event logs (e.g., Sysmon). It provides programmatic access to ingest and query logs, making it useful for security monitoring, incident response, and log analysis automation.

How to use Winlog Mcp?

Install dependencies with pip install -r requirements.txt, then run the server using python main.py --storage-path \\PATH\\TO\\logs\\. Configure MCP clients (e.g., Claude Desktop) by adding the command and arguments to the appropriate configuration file. Two tools are available: ingest_syslog for ingesting recent Sysmon logs and query_syslog for querying logs by timestamp.

Key features of Winlog Mcp

  • Ingest Windows Sysmon logs and store as files
  • Query logs by timestamp for recent events
  • Seamless interoperability with MCP tools and ecosystem
  • Log files named <timestamp>_<log_type>.log

Use cases of Winlog Mcp

  • Security monitoring and incident response via Sysmon analysis
  • Automated log analysis and troubleshooting
  • Querying recent event entries for investigation

常见问题

1

What are the system requirements?

Windows operating system, Python 3.7 or higher, and the pywin32 dependency are required.

2

How are logs stored?

Logs are stored as files named `<timestamp>_<log_type>.log` in a user-defined storage directory.

3

What tools does Winlog Mcp provide?

Two tools: `ingest_syslog` ingests recent Sysmon logs and writes them to a file; `query_syslog` queries ingested logs by timestamp and returns recent events.

4

How do I integrate Winlog Mcp with Claude Desktop?

Add the configuration to `%APPDATA%\Claude\claude_desktop_config.json` with the command `python` and arguments including the path to `main.py` and the `--storage-path` flag.

5

Does Winlog Mcp require Sysmon to be installed?

Yes, the README provides a Sysmon installation guideline and an `install.bat` script, indicating Sysmon should be installed before using the tool.

评论

开发工具 分类下的更多 MCP 服务器

AptiBuild AI — Career Intelligence

ParklandBuilds

AptiBuild AI — Career Intelligence MCP Server Structured career decision scaffolding for AI agents. Provides personality-conditioned business idea generation, official BLS OEWS wage data, FRED labor market signals, and

ArtiBot Cloud MCP - Zhijiangyun 智匠云

bofob

ArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation

1

Raccha AI

Shree Mandadi

MCP-first toolbox for agents: namespaced key-value storage, a FIFO queue, auth, and a handful of stateless utility tools (JWT decode, hashing, cert inspection, CIDR math). Free while in early access. This repository is a

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

3

Pugi

Pugi Inc.

Pugi is an AI product team that builds, checks and publishes websites and apps. Its MCP server gives agents a passive website security check graded A+ to F (headers, TLS, cookies, exposed keys in scripts), free with a no

广告合作