WinLog-mcp
LOCALXD3an/winlog-mcpProvides programmatic access to ingest and query Windows event logs (especially Sysmon logs), enabling security monitoring, incident response, and log analysis automation.
⚠ Local (STDIO) Server
This server runs as a process directly on your machine. It has access to your filesystem, environment variables, and SSH keys. Review the source code before installing.