iflow-mcp_jmstar85_azure-sentinel-mcp

# Advanced Sentinel MCP Server Advanced Microsoft Sentinel Threat Analysis and Automated Response System ## 🎯 Key Features ### 1. Threat Intelligence Analyst 🔍 In-depth analysis and intelligence for threat events - **MITRE ATT&CK Mapping**: Automatically map alerts/incidents to MITRE framework - **Threat Actor Profiling**: Generate attacker profiles based on TTPs - **IoC Extraction and Analysis**: Automatically extract and enrich threat indicators (IPs, domains, hashes, etc.) - **Threat Context Provision**: Kill Chain stages, threat severity, response priorities **Main Tools:** - `threat_event_analysis`: In-depth threat event analysis - `mitre_attack_mapping`: MITRE ATT&CK framework mapping - `ioc_extraction`: IoC extraction and enrichment - `threat_actor_profiling`: Threat actor profile generation ### 2. Attack Path Predictor 🎯 Machine learning-based attack path prediction and Kill Chain analysis - **Next TTP Prediction**: Predict next attack stages based on observed techniques - **Kill Chain Analysis**: Analyze current attack progression and completion - **Attack Timeline Reconstruction**: Visualize attack paths through event correlation - **Attack Velocity Analysis**: Estimate attack progression speed and time to Impact **Main Tools:** - `next_ttp_prediction`: ML-based next TTP prediction - `kill_chain_analysis`: Kill Chain progress analysis - `attack_timeline_reconstruction`: Attack timeline reconstruction ### 3. Response Coordinator 📋 Business impact assessment and response resource optimization - **Business Impact Assessment**: Quantify business impact of incidents - **Response Plan Generation**: Automated response playbook matching and plan generation - **Resource Prioritization**: Determine response priorities for multiple incidents - **SLA Management**: Set response time targets by severity **Main Tools:** - `business_impact_assessment`: Business impact assessment - `response_plan_generation`: Automated response plan generation - `resource_p…