Explore @Yamato-Security Open Source projects

Yamato Security 大和セキュリティ (@Yamato-Security)

Yamato-Security

Stars
341
Global Org. Rank 29,950 (Top 10 %)
Registered almost 4 years ago
Most used languages

Rust
44.4 %

Python
22.2 %

Batchfile 11.1 %

Nim
11.1 %

PowerShell
11.1 %
Location 🇯🇵 Japan
Country Total Rank 1,811
Country Ranking

PowerShell
1

Batchfile 2

Nim
7

Rust
15

Python
489

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

WELA

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

EnableWindowsLogSettings

Documentation and scripts to properly enable Windows event logs.

hayabusa-rules

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.

takajo

Takajō (鷹匠) is a Hayabusa results analyzer.

RustyBlue

RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.

hayabusa-sample-evtx

Sample evtx files to use for testing hayabusa detection rules

Presentations

hayabusa-evtx

A fork of the evtx Rust crate for Hayabusa

hayabusa-encoded-rules

Encrypted Hayabusa and Sigma rules to avoid anti-virus false positives

sigma-to-hayabusa-converter

Tool to convert Windows event log based Sigma rules to Hayabusa compatible rules.

suzaku-rules