Pinned Loading

1. Yamato-Security/hayabusa Yamato-Security/hayabusa Public

   Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

   Rust 3.1k 263

2. Yamato-Security/suzaku Yamato-Security/suzaku Public

   Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

   Rust 173 9

3. Yamato-Security/WELA Yamato-Security/WELA Public

   WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), pro…

   PowerShell 95 7

4. Yamato-Security/EventLog-Baseline-Guide Yamato-Security/EventLog-Baseline-Guide Public

   Windows Event Log Audit Configuration Baselines and Guidelines. Automated monitoring of audit policy settings across different security frameworks.

   Batchfile 10 2

5. THuntCloud THuntCloud Public

   🪽Docker Compose–based AWS CloudTrail threat hunting tool. Ingests logs into DuckDB with Rust, and lets you query them in natural language via an AI-powered Streamlit UI — no SIEM, no cloud dependen…

   Python 3

6. MISP MISP Public

   Forked from MISP/MISP

   MISP (core software) - Open Source Threat Intelligence and Sharing Platform

   PHP