Issues

• [Enhancement Request] Update custom rules to match MITRE version in Elastic

  elastic/example-mcp-app-security#65 · Filter by author SamerHammer opened on Aug 18, 2026

• [Epic] Attack Discovery generation — workflow/skill parity with the Kibana UI

  Epic
  elastic/example-mcp-app-security#61 · Filter by author davethegut opened on Jul 8, 2026

• [Bug] Detection Fules

  elastic/example-mcp-app-security#57 · Filter by author Danouchka opened on Jul 8, 2026

• [Epic] Add support for Kibana Discover-style search (DSL/KQL + runtime fields) in the Threat Hunt Workbench

  enhancementEpic
  elastic/example-mcp-app-security#51 · Filter by author davethegut opened on Jul 7, 2026

• [tech-debt] Make array-shaped ECS alert fields safe generically, not via a hand-maintained field allowlist

  enhancement
  elastic/example-mcp-app-security#49 · Filter by author maxcold opened on Jul 7, 2026

• [Features] cases enhancement & alerts triage

  elastic/example-mcp-app-security#45 · Filter by author Danouchka opened on Jul 2, 2026
  1

• [Feature] Profile Environment — map stack data for context-aware agent workflows

  elastic/example-mcp-app-security#44 · Filter by author seth-goodwin opened on Jul 1, 2026

• [Feature] Data transform / decode workbench for analyst investigations (CyberChef)

  elastic/example-mcp-app-security#43 · Filter by author seth-goodwin opened on Jul 1, 2026

• [Enhancement Request] Allow defining entities (users/hosts/services) for generating sample data

  elastic/example-mcp-app-security#41 · Filter by author SamerHammer opened on Jun 16, 2026
  3

• [Epic] Bring the Security MCP App to mobile via the Claude marketplace

  enhancementEpic
  elastic/example-mcp-app-security#38 · Filter by author davethegut opened on May 29, 2026

• [Enhancement Request] Allow connectivity to multiple Elastic clusters and ability to toggle between them

  elastic/example-mcp-app-security#22 · Filter by author SamerHammer opened on Apr 29, 2026
  1