Hayabusa
A Sigma-based threat hunting and fast forensics timeline generator for Windows event logs, written in Rust.
What is Hayabusa?
Hayabusa is a Sigma-based threat hunting and fast forensics timeline generator for Windows event logs. It parses Windows event logs to detect malicious activity using Sigma rules and creates consolidated timelines for analysis, solving the problem of tedious and noisy log analysis in DFIR investigations.
Digital forensics and incident response (DFIR) analysts, threat hunters, and Windows system administrators who need to analyze Windows event logs for security investigations.
Developers choose Hayabusa for its speed, comprehensive Sigma rule support, and ability to generate easy-to-analyze timelines. It is the only open-source tool with full Sigma v2 correlation rule support and integrates seamlessly with Velociraptor for enterprise-wide threat hunting.
Overview
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Use Cases
Best For
- Generating fast forensics timelines from Windows event logs
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
