Microsoft Sentinel Data Exploration

Official

官方远程：在 Sentinel 数据湖里找表、用自然语言取数。读的是安全日志，注意租户边界。

Microsoft Sentinel Data Exploration is an MCP server for Security work. 官方远程：在 Sentinel 数据湖里找表、用自然语言取数。读的是安全日志，注意租户边界。 Tags: Sentinel · 安全 · 官方.

SecurityhttpAuthor: MicrosoftVisit

What is Microsoft Sentinel Data Exploration

Microsoft Sentinel Data Exploration exposes Security capabilities to MCP clients. 官方远程：在 Sentinel 数据湖里找表、用自然语言取数。读的是安全日志，注意租户边界。

Install Microsoft Sentinel Data Exploration in Cursor / Claude / Codex

Cursor Open Cursor MCP settings (or user/project mcp.json) and add the server config on this page. If only a start command exists, put command/args into a Cursor MCP entry.

Claude Desktop Add the config to claude_desktop_config.json and restart Claude Desktop.

Codex Add the same command/args or JSON snippet to Codex MCP config. File location depends on your Codex version.

This page has no ready-made install snippet. Open the project home and follow the maintainer instructions to connect Microsoft Sentinel Data Exploration in Cursor, Claude, or Codex.

Please visit the Project Home to see installation and usage instructions.