MCP.so
登录
W

Winlog Mcp

@XD3an

代码仓库

关于 Winlog Mcp

A Model Context Protocol (MCP) tool for retrieving and analyzing Windows event logs (e.g. Sysmon). WinLog-mcp provides programmatic access to ingest and query Windows event logs, making it ideal for security monitoring, incident response, and log analysis automation.

#winlog-mcp#cybersecurity#log-analysis

基本信息

分类

开发工具

传输方式

stdio

发布者

XD3an

提交者

XD3an

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "winlog-mcp": {
      "command": "python",
      "args": [
        "\\PATH\\TO\\main.py",
        "--storage-path",
        "\\PATH\\TO\\logs\\"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Winlog Mcp?

Winlog Mcp is a Model Context Protocol (MCP) tool for retrieving and analyzing Windows event logs (e.g., Sysmon). It provides programmatic access to ingest and query logs, making it useful for security monitoring, incident response, and log analysis automation.

How to use Winlog Mcp?

Install dependencies with pip install -r requirements.txt, then run the server using python main.py --storage-path \\PATH\\TO\\logs\\. Configure MCP clients (e.g., Claude Desktop) by adding the command and arguments to the appropriate configuration file. Two tools are available: ingest_syslog for ingesting recent Sysmon logs and query_syslog for querying logs by timestamp.

Key features of Winlog Mcp

  • Ingest Windows Sysmon logs and store as files
  • Query logs by timestamp for recent events
  • Seamless interoperability with MCP tools and ecosystem
  • Log files named <timestamp>_<log_type>.log

Use cases of Winlog Mcp

  • Security monitoring and incident response via Sysmon analysis
  • Automated log analysis and troubleshooting
  • Querying recent event entries for investigation

FAQ from Winlog Mcp

What are the system requirements?

Windows operating system, Python 3.7 or higher, and the pywin32 dependency are required.

How are logs stored?

Logs are stored as files named <timestamp>_<log_type>.log in a user-defined storage directory.

What tools does Winlog Mcp provide?

Two tools: ingest_syslog ingests recent Sysmon logs and writes them to a file; query_syslog queries ingested logs by timestamp and returns recent events.

How do I integrate Winlog Mcp with Claude Desktop?

Add the configuration to %APPDATA%\Claude\claude_desktop_config.json with the command python and arguments including the path to main.py and the --storage-path flag.

Does Winlog Mcp require Sysmon to be installed?

Yes, the README provides a Sysmon installation guideline and an install.bat script, indicating Sysmon should be installed before using the tool.

评论

开发工具 分类下的更多 MCP 服务器

Deepwiki MCP Server

regenrek

📖 MCP server for fetch deepwiki.com and get latest knowledge in Cursor and other Code Editors

1.4K

DevDocs by CyberAGI 🚀

cyberagiinc

Completely free, private, UI based Tech Documentation MCP server. Designed for coders and software developers in mind. Easily integrate into Cursor, Windsurf, Cline, Roo Code, Claude Desktop App

2.1K

Burp Suite MCP Server Extension

PortSwigger

MCP Server for Burp

961

Test

x1xhlol

FULL Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae, Traycer AI, VSCode Agent, Warp.dev, Windsurf, Xcode, Z.ai Code, Dia & v0. (And other Open Sou

141.7K

Sentry

modelcontextprotocol

Model Context Protocol Servers

88.1K