Discover the toolingbehind modern intelligence
The operating system for AI infrastructure discovery. Search a live map of MCP servers, AI agents, LLM tools, automation systems, and developer infrastructure.
security-investigator
Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python Modules and custom copilot-instructions.
199stars
50forks
Python
Quality signals
StaleNo testsNo CIThin docsNo licensePopular
AI summary
Auto-generated overview of what this skill does and when to reach for it.
Automated security investigation tool that scans incidents, users, devices, and IPs using Microsoft Sentinel, Defender XDR, and threat intelligence via GitHub Copilot and MCP servers.
Use this when
- Need to investigate a suspicious user account
- Want to check if an IP address is malicious
- Running a quick security scan across multiple domains
- Analyzing a security incident in Microsoft Sentinel
- Checking device compliance and vulnerabilities
Don't use when
- Need real-time threat detection (not an EDR/XDR tool)
- Investigating non-Microsoft security products
- Running investigations without access to Microsoft Sentinel/Defender
Capabilities
- Scans 9 security domains in one command
- Generates prioritized findings with color-coded verdicts
- Uses 25 specialized investigation workflows (Agent Skills)
- Integrates with Microsoft Sentinel, Defender XDR, and Graph API
- Enriches IPs with geolocation, VPN, and threat data
- Produces HTML reports with drill-down recommendations
InstallSKILLInstall as a Claude Code skill
Universal installANY TOOL
$ npx skillcity@latest SCStelz/security-investigatorAuto-detects the skill or MCP server in this repo and installs it for Claude Code, Codex, Cursor, Cline, OpenCode, Gemini CLI, Anti-Gravity, OpenClaw and Hermes.
Requires Node.js 18+ (ships with npx).
Or install manually
# Install into ~/.claude/skills/ mkdir -p ~/.claude/skills/security-investigator curl -fsSL https://raw.githubusercontent.com/SCStelz/security-investigator/main/README.md -o ~/.claude/skills/security-investigator/SKILL.md
Loading README…
Ask a simulated agent to run this skill. It loads the real SKILL.md and reasons over your task with NVIDIA.
security-investigator — sandboxAI sandbox
Pick a quick prompt below or type your own — watch the agent execute this skill step by step.
guest@skillcity:~$Try a prompt