rsfl/splunk-mcp-llm-siemulator

A Docker lab integrating Splunk SIEM with Ollama LLM via MCP for AI security operations. Features Promptfoo OWASP evaluation, TA-ollama and TA-mcp-jsonrpc add-ons, dual bind-mount log ingestion, and real-time HEC streaming across six indexes for MITRE ATLAS TTP detection.

语言：PowerShell · GitHub 星标：33 · Fork：6

在 GitHub 上查看原仓库