Yamato Security 大和セキュリティ (@Yamato-Security)
Guthub

Yamato-Security

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    341
  • Global Org. Rank 30,044 (Top 10 %)
  • Registered about 4 years ago
  • Most used languages
    Rust
         44.4 %
    Python
         22.2 %
    PowerShell
         11.1 %
    Nim
         11.1 %
    Batchfile     11.1 %
  • Location 🇯🇵 Japan
  • Country Total Rank 1,811
  • Country Ranking
    PowerShell
         1
    Batchfile     2
    Nim
         9
    Rust
         16
    Python
         480

Top repositories

1

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Rust
2,200
star
2

WELA

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
PowerShell
744
star
3

EnableWindowsLogSettings

Documentation and scripts to properly enable Windows event logs.
Batchfile
532
star
4

hayabusa-rules

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
Python
130
star
5

takajo

Takajō (鷹匠) is a Hayabusa results analyzer.
Nim
78
star
6

RustyBlue

RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.
Rust
67
star
7

hayabusa-sample-evtx

Sample evtx files to use for testing hayabusa detection rules
38
star
8

Presentations

13
star
9

hayabusa-evtx

A fork of the evtx Rust crate for Hayabusa
Rust
6
star
10

sigma-to-hayabusa-converter

Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.
Python
3
star
11

hayabusa-encoded-rules

Encrypted Hayabusa and Sigma rules to avoid anti-virus false positives
Rust
3
star
12

suzaku-rules

1
star