{"id":"ea680ae7-7f27-4c97-8e3f-c36a4536daaa","shortId":"ZrzA2d","kind":"mcp","title":"Microsoft Defender KQL","tagline":"Execute KQL queries against Microsoft Defender Advanced Hunting via natural language.","description":"Execute KQL queries against Microsoft Defender Advanced Hunting via natural language.\n\nEnables AI assistants to execute Kusto Query Language (KQL) queries against Microsoft Defender's Advanced Hunting capabilities. Translates natural language security questions into KQL queries, runs them against the Defender API, and returns structured threat hunting results.","tags":["microsoft","defender","kql"],"capabilities":["mcp","transport-stdio"],"categories":[],"synonyms":[],"warnings":[],"endpointUrl":"https://www.pulsemcp.com/servers/gh-trickyfalcon-ms-defender-kql","protocol":"mcp","transport":"stdio","auth":{"type":"mcp","details":{"transport":"stdio"}},"qualityScore":"0.400","qualityRationale":"deterministic score 0.40 from registry signals: · indexed on pulsemcp · registry-generated description present","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:mcp:v1","enrichmentVersion":1,"enrichedAt":"2026-05-11T07:23:49.139Z","embedding":null,"createdAt":"2026-04-28T08:22:14.205Z","updatedAt":"2026-05-11T07:23:49.139Z","lastSeenAt":"2026-05-11T07:23:49.139Z","tsv":"'advanc':10,21,40 'ai':27 'api':56 'assist':28 'capabl':42 'defend':2,9,20,38,55 'enabl':26 'execut':4,15,30 'hunt':11,22,41,61 'kql':3,5,16,34,49 'kusto':31 'languag':14,25,33,45 'mcp' 'microsoft':1,8,19,37 'natur':13,24,44 'queri':6,17,32,35,50 'question':47 'result':62 'return':58 'run':51 'secur':46 'structur':59 'threat':60 'translat':43 'transport-stdio' 'via':12,23","prices":[{"id":"daee4ca0-b999-458b-9137-0576b56aa73f","listingId":"ea680ae7-7f27-4c97-8e3f-c36a4536daaa","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"mcp-free","isPrimary":true,"details":{"transport":"stdio"},"createdAt":"2026-04-28T08:22:14.205Z"}],"sources":[{"listingId":"ea680ae7-7f27-4c97-8e3f-c36a4536daaa","source":"pulsemcp","sourceId":"https://www.pulsemcp.com/servers/gh-trickyfalcon-ms-defender-kql","sourceUrl":"https://api.pulsemcp.com/v0beta/servers","isPrimary":true,"firstSeenAt":"2026-04-28T08:22:14.205Z","lastSeenAt":"2026-05-11T07:23:49.139Z"}],"details":{"listingId":"ea680ae7-7f27-4c97-8e3f-c36a4536daaa","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"source":"pulsemcp","transport":"stdio","server_name":"Microsoft Defender KQL","registry_url":"https://www.pulsemcp.com/servers/gh-trickyfalcon-ms-defender-kql"},"updatedAt":"2026-05-11T07:23:49.139Z"}}