$ loading_
Execute Microsoft Defender XDR response and incident actions with natural language.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "Response MCP Server" yet — see the docs or source repo.
In Microsoft Defender XDR, isolate device DESKTOP-2049 and summarize the result with recommended next steps.
Returns the isolation result, device status, and recommended investigation or recovery steps.
Start a Defender quick antivirus scan on Alice's laptop and tell me whether the scan started or failed.
Returns the scan action result, target device details, and success or failure status.
Collect a forensic package from the host linked to incident INC-7842 and update the incident with the response progress.
Returns the forensic collection and incident update results, including related assets and a response summary.
Investigate Microsoft Defender security events with natural language KQL hunting.
Analyze security incidents, map ATT&CK tactics, score severity, and suggest remediation.
Safely run network compliance checks, backups, and configuration tasks.
Diagnose incidents with audited read-only access to ops tools and RCA.
Execute PowerShell commands, scripts, and system operations on Windows through MCP.
Analyze Android and iOS app packages for security issues via natural language.