{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_mw65e36ske5a","handle":"iflow-mcp-jmstar85-azure-sentinel-mcp","url":"https://wellknown.network/agents/iflow-mcp-jmstar85-azure-sentinel-mcp","links":{"self":"https://wellknown.network/agents/iflow-mcp-jmstar85-azure-sentinel-mcp/record.json","html":"https://wellknown.network/agents/iflow-mcp-jmstar85-azure-sentinel-mcp","markdown":"https://wellknown.network/agents/iflow-mcp-jmstar85-azure-sentinel-mcp/record.md","api":"https://wellknown.network/api/v1/agents/iflow-mcp-jmstar85-azure-sentinel-mcp","status":"https://wellknown.network/api/v1/agents/iflow-mcp-jmstar85-azure-sentinel-mcp/status","claim":"https://wellknown.network/agents/iflow-mcp-jmstar85-azure-sentinel-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/iflow-mcp-jmstar85-azure-sentinel-mcp/claim.json","badge":"https://wellknown.network/agents/iflow-mcp-jmstar85-azure-sentinel-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/iflow-mcp-jmstar85-azure-sentinel-mcp/history","tools":"https://wellknown.network/api/v1/agents/iflow-mcp-jmstar85-azure-sentinel-mcp/tools"},"ard":{"identifier":"urn:air::server:iflow-mcp-jmstar85-azure-sentinel-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"iflow-mcp_jmstar85_azure-sentinel-mcp","summary":"Advanced Microsoft Sentinel Threat Analysis and Automated Response System","description":"# Advanced Sentinel MCP Server\n\nAdvanced Microsoft Sentinel Threat Analysis and Automated Response System\n\n## 🎯 Key Features\n\n### 1. Threat Intelligence Analyst 🔍\nIn-depth analysis and intelligence for threat events\n\n- **MITRE ATT&CK Mapping**: Automatically map alerts/incidents to MITRE framework\n- **Threat Actor Profiling**: Generate attacker profiles based on TTPs\n- **IoC Extraction and Analysis**: Automatically extract and enrich threat indicators (IPs, domains, hashes, etc.)\n- **Threat Context Provision**: Kill Chain stages, threat severity, response priorities\n\n**Main Tools:**\n- `threat_event_analysis`: In-depth threat event analysis\n- `mitre_attack_mapping`: MITRE ATT&CK framework mapping\n- `ioc_extraction`: IoC extraction and enrichment\n- `threat_actor_profiling`: Threat actor profile generation\n\n### 2. Attack Path Predictor 🎯\nMachine learning-based attack path prediction and Kill Chain analysis\n\n- **Next TTP Prediction**: Predict next attack stages based on observed techniques\n- **Kill Chain Analysis**: Analyze current attack progression and completion\n- **Attack Timeline Reconstruction**: Visualize attack paths through event correlation\n- **Attack Velocity Analysis**: Estimate attack progression speed and time to Impact\n\n**Main Tools:**\n- `next_ttp_prediction`: ML-based next TTP prediction\n- `kill_chain_analysis`: Kill Chain progress analysis\n- `attack_timeline_reconstruction`: Attack timeline reconstruction\n\n### 3. Response Coordinator 📋\nBusiness impact assessment and response resource optimization\n\n- **Business Impact Assessment**: Quantify business impact of incidents\n- **Response Plan Generation**: Automated response playbook matching and plan generation\n- **Resource Prioritization**: Determine response priorities for multiple incidents\n- **SLA Management**: Set response time targets by severity\n\n**Main Tools:**\n- `business_impact_assessment`: Business impact assessment\n- `response_plan_generation`: Automated response plan generation\n- `resource_p…","publisher":null,"homepage":null,"repository":null,"version":"1.0.1","license":null,"protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:iflow-mcp_jmstar85_azure-sentinel-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","summary":"pypi","version":"pypi","description":"pypi"}},"derived":{"capabilities":[{"slug":"infra.cloud","name":"Cloud Platforms","confidence":0.688,"provenance":"derived"}],"categories":["infra"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"iflow-mcp_jmstar85_azure-sentinel-mcp","registry":"pypi","observedAt":"2026-11-09T09:28:46.278Z","publishedAt":"2026-02-04T04:01:33.727456Z","latestVersion":"1.0.1"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"iflow-mcp_jmstar85_azure-sentinel-mcp","url":"https://pypi.org/project/iflow-mcp_jmstar85_azure-sentinel-mcp/","firstSeenAt":"2026-09-09T19:24:14.571Z","fetchedAt":"2026-11-09T09:27:21.724Z","normalizedAt":"2026-11-09T09:27:21.724Z"}]},"firstSeenAt":"2026-09-09T19:24:14.571Z","updatedAt":"2026-11-09T09:28:46.278Z"}