Skip to content

@Yamato-Security Yamato Security 大和セキュリティ

Change the repository type filter

All

    Repositories list

    21 repositories

    • EventLog-Baseline-Guide

      Public
      Windows Event Log Audit Configuration Baselines and Guidelines. Automated monitoring of audit policy settings across different security frameworks.
      Batchfile
      •
      MIT License
      •2•10•0•0•Updated Apr 25, 2026Apr 25, 2026

    • hayabusa-rules

      Public
      Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
      windowsattacklog
      windowsattackloganalysiseventdfirmitresigmahayabusa
      Python
      •
      Other
      •28•217•3•1•Updated Apr 24, 2026Apr 24, 2026

    • hayabusa-encoded-rules

      Public
      Encoded Hayabusa and Sigma rules to avoid anti-virus false positives and reduce files stored on target systems.
      Rust
      •
      Other
      •0•9•1•0•Updated Apr 24, 2026Apr 24, 2026

    • WELA

      Public
      WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing Windows event log settings. Windows event logs are a vital source of information for Digital Forens…
      PowerShell
      •
      MIT License
      •7•96•5•0•Updated Apr 24, 2026Apr 24, 2026

    • hayabusa

      Public
      Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
      windowsrustsecurity
      windowsrustsecurityattackdetectionincident-responselogseventthreatforensics
      Rust
      •
      GNU Affero General Public License v3.0
      •263•3.1k•35•3•Updated Apr 24, 2026Apr 24, 2026

    • mecha-hayabusa

      Public
      AI analyzer for Hayabusa results.
      Python
      •
      GNU Affero General Public License v3.0
      •0•16•0•0•Updated Apr 10, 2026Apr 10, 2026

    • takajo

      Public
      Takajō (鷹匠) is a Hayabusa results analyzer.
      windowsnimlog
      windowsnimloganalysiseventnim-langhayabusa
      Nim
      •
      GNU Affero General Public License v3.0
      •10•157•17•0•Updated Apr 6, 2026Apr 6, 2026

    • suzaku

      Public
      Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.
      awssecurityengineering
      awssecurityengineeringmonitoringlogazuredetectiongcpidthreat
      Rust
      •
      GNU Affero General Public License v3.0
      •9•174•3•0•Updated Mar 29, 2026Mar 29, 2026

    • hayabusa-evtx

      Public
      A fork of the evtx Rust crate for Hayabusa
      Rust
      •
      Apache License 2.0
      •3•13•4•1•Updated Dec 13, 2025Dec 13, 2025

    • suzaku-rules

      Public
      Other
      •3•11•1•1•Updated Dec 9, 2025Dec 9, 2025

    • Presentations

      Public
      2•21•0•0•Updated Nov 19, 2025Nov 19, 2025

    • hayabusa-sample-evtx

      Public
      Sample evtx files to use for testing hayabusa detection rules
      4•64•0•0•Updated Nov 5, 2025Nov 5, 2025

    • IT-Yokai

      Public
      Collection of IT Yōkai (妖怪) (traditional Japanese supernatural beings)
      Other
      •1•7•0•0•Updated Oct 31, 2025Oct 31, 2025

    • sigma-to-hayabusa-converter

      Public
      Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.
      Python
      •
      GNU General Public License v3.0
      •0•15•4•0•Updated Oct 22, 2025Oct 22, 2025

    • WELA-RulesGenerator

      Public
      This repository generates rules to be used with WELA for auditing Windows event log audit settings.
      Rust
      •
      GNU General Public License v3.0
      •0•5•0•0•Updated Oct 9, 2025Oct 9, 2025

    • EnableWindowsLogSettings

      Public
      Documentation and scripts to properly enable Windows event logs.
      windowssecurityauditing
      windowssecurityauditingmonitoringlogseventforensicsdfirsysmonsigma
      Batchfile
      •
      GNU General Public License v3.0
      •66•694•3•0•Updated Oct 3, 2025Oct 3, 2025

    • suzaku-sample-data

      Public
      Sample cloud logs to test with Suzaku.
      2•4•0•0•Updated Sep 29, 2025Sep 29, 2025

    • sigma-rust

      Public
      A fork of the Rust library for parsing and evaluating Sigma rules
      Rust
      •
      Apache License 2.0
      •8•2•1•0•Updated Jul 28, 2025Jul 28, 2025

    • .github

      Public
      0•1•0•0•Updated Apr 21, 2025Apr 21, 2025

    • WELA-deprecated

      Public
      WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
      windowsloganalysis
      windowsloganalysistimelinelogseventthreatforensicsdfirresponse
      PowerShell
      •
      GNU General Public License v3.0
      •79•778•9•0•Updated Feb 3, 2023Feb 3, 2023

    • RustyBlue

      Public archive
      RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.
      Rust
      •
      MIT License
      •6•72•0•0•Updated Oct 13, 2022Oct 13, 2022
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.