Yamato Security 大和セキュリティ

All

18 repositories

hayabusa
Public
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
windows rust attack detection logs event threat forensics dfir response
Rust
•
GNU Affero General Public License v3.0
•226•2.6k•36•1•Updated Jun 5, 2025Jun 5, 2025
hayabusa-rules
Public
Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
windows attack log analysis event dfir mitre sigma hayabusa
Python
•
Other
•26•180•4•0•Updated Jun 4, 2025Jun 4, 2025
hayabusa-encoded-rules
Public
Encoded Hayabusa and Sigma rules to avoid anti-virus false positives and reduce files stored on target systems.
Rust
•
Other
•0•9•0•0•Updated Jun 4, 2025Jun 4, 2025
suzaku-rules
Public
Other
•1•10•0•0•Updated Jun 4, 2025Jun 4, 2025
EventLog-Baseline-Guide
Public
Batchfile
•
MIT License
•2•3•0•0•Updated Jun 3, 2025Jun 3, 2025
takajo
Public
Takajō (鷹匠) is a Hayabusa results analyzer.
windows nim log analysis event nim-lang hayabusa
Nim
•
GNU Affero General Public License v3.0
•8•121•19•1•Updated Jun 1, 2025Jun 1, 2025
suzaku
Public
Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.
aws security engineering monitoring log azure detection gcp id threat
Rust
•
GNU Affero General Public License v3.0
•7•125•11•2•Updated May 31, 2025May 31, 2025
WELA
Public
Windows Event Log Auditor
PowerShell
•
MIT License
•2•21•7•0•Updated May 31, 2025May 31, 2025
hayabusa-evtx
Public
A fork of the evtx Rust crate for Hayabusa
Rust
•
Apache License 2.0
•2•8•4•0•Updated May 21, 2025May 21, 2025
WELA-RulesGenerator
Public
This repository generates rules to be used with WELA for auditing Windows event log audit settings.
Rust
•
GNU General Public License v3.0
•0•2•0•0•Updated May 5, 2025May 5, 2025
suzaku-sample-data
Public
Sample cloud logs to test with Suzaku.
0•4•0•0•Updated Apr 24, 2025Apr 24, 2025
.github
Public
0•1•0•0•Updated Apr 21, 2025Apr 21, 2025
Presentations
Public
2•18•0•0•Updated Apr 2, 2025Apr 2, 2025
sigma-to-hayabusa-converter
Public
Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.
Python
•
GNU General Public License v3.0
•0•13•4•0•Updated Feb 6, 2025Feb 6, 2025
hayabusa-sample-evtx
Public
Sample evtx files to use for testing hayabusa detection rules
3•57•0•1•Updated Nov 4, 2024Nov 4, 2024
EnableWindowsLogSettings
Public
Documentation and scripts to properly enable Windows event logs.
windows auditing monitoring logs event forensics dfir sysmon sigma hayabusa
Batchfile
•
GNU General Public License v3.0
•54•614•3•0•Updated Sep 20, 2023Sep 20, 2023
WELA-deprecated
Public
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
windows log analysis timeline logs event threat forensics dfir response
PowerShell
•
GNU General Public License v3.0
•82•783•9•0•Updated Feb 3, 2023Feb 3, 2023
RustyBlue
Public
RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.
Rust
•
MIT License
•6•72•1•0•Updated Oct 13, 2022Oct 13, 2022