HEARTH
Search community threat hunting hypotheses by keyword, threat actor, or the log sources you have.
Connect
Review any command before running it. Package names and URLs come from the server's own registry entry.
Package (npm 0.1.1)
npx -y @thorcollective/[email protected]Or add to your MCP client config:
{
"mcpServers": {
"hearth": {
"command": "npx",
"args": [
"-y",
"@thorcollective/[email protected]"
]
}
}
}Related servers
semgrep
Scan code for security vulnerabilities using Semgrep.
ida-pro-mcp
IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.
lauriewired/ghidramcp
Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.
bethington/ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention…
jadx-ai-mcp
JADX decompiler plugin providing live, LLM-assisted reverse engineering.
beelzebub
Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious…
Data from the Official MCP Registry