Pinned Loading

1. Yamato-Security/hayabusa Yamato-Security/hayabusa Public

   Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

   Rust 3.3k 293

2. Yamato-Security/suzaku Yamato-Security/suzaku Public

   Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

   Rust 220 12

3. Yamato-Security/senrigan Yamato-Security/senrigan Public

   Offline, open-source AWS CloudTrail DFIR & threat hunting platform — 120+ built-in hunts, 100+ Superset dashboard charts, AI chat, and an AWS Config resource graph.

   Python 22 3

4. sigma sigma Public

   Forked from SigmaHQ/sigma

   Main Sigma Rule Repository

   Python

5. evtx-msg-rs evtx-msg-rs Public

   A Rust CLI tool for **full message resolution of Windows Event Log (`.evtx`) records** — reconstructing the human-readable message text that Event Viewer displays, including message resource lookup…

   Rust

6. misp-galaxy misp-galaxy Public

   Forked from MISP/misp-galaxy

   Clusters and elements to attach to MISP events or attributes (like threat actors)

   Python