Claude Desktop
Desktop · Freemium · Proprietary
Anthropic's official Claude AI desktop application. Supports MCP servers to extend functionality.
WindowsMacOS
eventwhisper
hexastrike/eventwhisper
EventWhisper exposes fast, scriptable access to Windows.evtx logs via an MCP (Model Context Protocol) server. It’s pure Python (uses the evtx library), instead of a PowerShell wrapper and does not execute commands on the host — safer for incident response, digital forensics, and threat hunting.
Install
Client configuration
{
"mcpServers": {
"EventWhisper": {
"command": "poetry",
"args": [
"-C",
"C:\\Path\\To\\eventwhisper",
"run",
"python",
"-m",
"eventwhisper.mcp.server"
],
"env": {
"PYTHONIOENCODING": "<PYTHONIOENCODING>"
}
}
}
}Environment variables
PYTHONIOENCODING- Author
- @hexastrike
- Category
- Monitoring, Security
- License
- GPL-3.0
- Updated
- Oct 6, 2026
About eventwhisper
Built specifically for IR/DFIR & hunting so you don’t need to look up Event IDs all day. Designed, developed, and tested on Windows with Claude — and usable from any MCP client.
Features
Targeted filtering: time window, EventID(s), and case-insensitive keywords (include/exclude)
Field projection: return only the dotted paths you need (huge output reduction)
Input normalization: accepts flexible input formats so it still works if types/format aren’t perfect.
MCP-ready: plugs into Claude Desktop (and other MCP clients)
Details on this page are taken from the project's README. Open README
Supported clients
Clients mentioned in this server's README:
Related MCP servers
2344
comet-ml/opik
Opik is the open-source LLM observability and evaluation platform for AI agent tracing, LLM evaluation, prompt management, and production monitoring. Built by Comet. Apache-2.0 licensed, free to self-host the full platform, with 20,000+ GitHub stars.
MCP Grafana
grafana/mcp-grafana
A Model Context Protocol (MCP) server for Grafana.
Vite Plugin Vue MCP
webfansplz/vite-plugin-vue-mcp
Vite plugin that enables a MCP server for your Vue app to provide information about the component tree, state, routes, and pinia tree and state.
api200
API-200/api200
API 200 is all-in-one gateway for managing third-party APIs efficiently. Integrate third-party APIs or setup MCP server in minutes with auto-generated code, docs, auth, caching and error handling – so you can focus on what really matters.
WireMCP (Wireshark)
0xkoda/wiremcp
WireMCP is a Model Context Protocol (MCP) server designed to empower Large Language Models (LLMs) with real-time network traffic analysis capabilities.
gospy
monsterxx03/gospy
A tool for inspecting and analyzing running Go processes, including goroutine states, memory statistics, and binary information.