<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Agentic Security Field Guide: Alert triage</title><description>Tools for the task: Alert triage, with reach and lab verdict.</description><link>https://readbeforerun.ai/</link><item><title>CrowdStrike Falcon MCP Server (reach 3 · beyond declared (1))</title><link>https://readbeforerun.ai/catalog/crowdstrike-falcon-mcp/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/crowdstrike-falcon-mcp/</guid><description>MCP server that connects agents to the CrowdStrike Falcon platform: detections, threat intel, host management and response.</description><pubDate>Sat, 07 Nov 2026 00:00:00 GMT</pubDate></item><item><title>GitGuardian MCP Server (reach 3 · as declared)</title><link>https://readbeforerun.ai/catalog/gitguardian-ggmcp/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/gitguardian-ggmcp/</guid><description>MCP server that brings GitGuardian secret detection, incident triage and honeytokens into an AI agent.</description><pubDate>Sat, 07 Nov 2026 00:00:00 GMT</pubDate></item><item><title>Google Security Operations MCP Server (reach 3 · not run yet)</title><link>https://readbeforerun.ai/catalog/google-secops-mcp/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/google-secops-mcp/</guid><description>MCP server for Google Security Operations (Chronicle) with 68 tools for event search, alerts, detection rules, log ingestion and SIEM configuration.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Purple AI MCP Server (reach 3 · not run yet)</title><link>https://readbeforerun.ai/catalog/sentinelone-purple-mcp/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/sentinelone-purple-mcp/</guid><description>Read-only MCP server for the SentinelOne Singularity platform: Purple AI, data-lake PowerQuery, alerts, vulnerabilities, misconfigurations and inventory.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item><item><title>SentinelOne MCP Server (s1-secops-mcp) (reach ≥2 · not run yet)</title><link>https://readbeforerun.ai/catalog/sentinelone-s1-secops-mcp/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/sentinelone-s1-secops-mcp/</guid><description>Node.js MCP server with 35 tools for the SentinelOne console, data lake, alert management and Hyperautomation, read-only by default.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item><item><title>SentinelOne AI Analyst: Claude Skills (reach 3 · not run yet)</title><link>https://readbeforerun.ai/catalog/sentinelone-s1-secops-skills/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/sentinelone-s1-secops-skills/</guid><description>Claude plugin with eight SentinelOne skills for threat hunting, alert triage, detections, dashboards, parsers and Hyperautomation workflows.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item><item><title>[demo] Example SIEM Query (reach ≥1 · not run yet)</title><link>https://readbeforerun.ai/catalog/example-siem-query/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/example-siem-query/</guid><description>Builds and explains SIEM queries for alert triage from a short description of the alert.</description><pubDate>Mon, 12 Oct 2026 00:00:00 GMT</pubDate></item></channel></rss>