About hayabusa
Hayabusa is a tool for threat hunting and generating forensic timelines from Windows event logs, using Sigma-based detection rules. Event logs record activity on a Windows system, while a forensic timeline arranges events in time order to support investigation. Sigma is a format for expressing detection rules that can be applied to log data. Hayabusa brings these elements together to help analysts search event records for indicators and organize findings chronologically. The supplied information does not specify which events or rule sets are covered, how findings are ranked, or what output formats are available. It also does not claim complete detection. Hayabusa’s documented role is defensive analysis of Windows event logs through rule-based hunting and timeline generation.
Categories
Platforms
Website & Downloads
Trusted package or store listing
Related software
- 0patch Agent — 0patch Agent is a security utility for applying micropatches to vulnerabilities in many programs.
- 3va — 3va is a JavaScript and TypeScript runtime built on the V8 engine.
- A1RunGuard — A1RunGuard is a Windows process firewall for controlling which programs can run.
- AES Crypt — AES Crypt is file-encryption software for Windows that integrates with the desktop and also includes a command-line program.
- Actifile Agent — Actifile Agent is an endpoint tool connected to a software platform for discovering, monitoring, and protecting sensitive data.
- Active Directory Rights Management Services Client 2.1 — Active Directory Rights Management Services Client helps protect access to and use of information handled by compatible applications.
