Yamato-Security/hayabusa：（）是一款基于Sigma的威胁狩猎和快速取证时间轴生成器，用

3.4k

GNU Affero General Public License v3.0

项目介绍

Yamato-Security/hayabusa 是一个托管在 GitHub 上的开源项目，主要使用 Rust 编写，采用 GNU Affero General Public License v3.0 许可证，目前获得 3.4k 个 Star、304 次 Fork。

仓库全名: Yamato-Security/hayabusa
开源许可证: GNU Affero General Public License v3.0
Star 数: 3.4k
Fork 数: 304
未关闭 Issue: 19

README 摘要

Windows event log fast forensics timeline generator and threat hunting tool. Written in memory-safe Rust by Yamato Security — the only open-source tool with full Sigma support, including v2 correlation rules. 📖 Read the Documentation → Available in 15 languages — English · 日本語 · 繁體中文 · 한국어 · Deutsch · Türkçe · Français · Español · Português (Brasil) · Українська · हिन्दी · Bahasa Indonesia · မြန်မာဘာသာ · ไทย ·…

完整内容见 GitHub 原始 README 或本页。

常见问题

hayabusa 用什么语言开发？

主要使用 Rust 编写，采用 GNU Affero General Public License v3.0 许可证，目前有 3.4k 个 Star。

hayabusa 可以免费商用吗？

仓库标注的许可证为 GNU Affero General Public License v3.0，商用前请先阅读仓库 LICENSE 文件确认授权范围。

如何获取 hayabusa 的源码？

可以直接克隆仓库：git clone https://github.com/Yamato-Security/hayabusa.git，默认分支为 main；安装与运行步骤见仓库 README。

hayabusa 最近还在维护吗？

仓库最近一次更新为 1 天前，当前有 19 个未关闭 Issue；Star 数为 3.4k，可作为社区活跃度的参考。

关于

GitHub 原始描述（英文）

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

描述取自 GitHub 官方 API，保持仓库作者书写的原文。

简要分析

热度分

4093

价值分

2159

活跃状态

活跃

attack cybersecurity detection dfir event forensics hayabusa hunting incident incident-response logs response rust security security-automation sigma threat threat-hunting windows yamato

GitHub

语言占比

CSS

Python

RenderScript

Rust

Release

v4.3.1 - Vulnpocalypse Release1 周前
v4.3.0 - Vulnpocalypse Release1 周前
v4.2.0 - Autumn Release3 周前
v4.1.0 - Suzumushi Release9月13日
v4.0.0 - BlackHat Arsenal USA Release8月3日

贡献者

README

Windows event log fast forensics timeline generator and threat hunting tool.
Written in memory-safe Rust by Yamato Security — the only open-source tool with full Sigma support, including v2 correlation rules.

📖 Read the Documentation →

_{Available in 15 languages — English · 日本語 · 繁體中文 · 한국어 · Deutsch · Türkçe · Français ·
Español · Português (Brasil) · Українська · हिन्दी · Bahasa Indonesia · မြန်မာဘာသာ · ไทย · العربية}

🦅 About

Hayabusa is a Windows event log fast forensics timeline generator and threat hunting tool. It is multi-threaded for speed and consolidates events from a single host or thousands of systems into one CSV / JSON / JSONL timeline — ready for analysis in LibreOffice, Timeline Explorer, Elastic Stack, Timesketch and more. It can run live on a single system, gather logs for offline analysis, or hunt across the enterprise with Velociraptor.

📖 Documentation

All documentation now lives on a dedicated, searchable, multi-language site:

👉 yamato-security.github.io/hayabusa

Section
🚀 Getting Started	Download, install and run Hayabusa
⌨️ Command Reference	Every command and option, with examples
📊 Timeline Output	Output profiles, fields and abbreviations
🧩 Rules	Detection rules and Sigma compatibility
🔎 Importing & Analysis	Elastic Stack, Timesketch, Timeline Explorer, jq

⬇️ Download

Grab the latest signed binaries from the Releases page, or see Getting Started for live-response packages and building from source.

🗂️ Looking for the old README?

The previous single-page README is preserved unchanged:

📄 OLD-README.md — English
📄 OLD-README-Japanese.md — 日本語

🤝 Contributing & License

Contributions and bug reports are very welcome — see Contributing & Support. Hayabusa is released under the GNU AGPLv3 license; detection rules are released under the Detection Rule License (DRL) 1.1.

Made with 🦅 by Yamato Security · @SecurityYamato

hayabusa

项目介绍

README 摘要

常见问题

关于

简要分析

语言占比

Release

贡献者

README

📖 Read the Documentation →

🦅 About

📖 Documentation

👉 yamato-security.github.io/hayabusa

⬇️ Download

🗂️ Looking for the old README?

🤝 Contributing & License

评论

hayabusa

项目介绍

README 摘要

常见问题

相关仓库

关于

简要分析

语言占比

Release

贡献者

README

📖 Read the Documentation →

🦅 About

📖 Documentation

👉 yamato-security.github.io/hayabusa

⬇️ Download

🗂️ Looking for the old README?

🤝 Contributing & License

评论