Skip to content
@Yamato-Security

Yamato Security 大和セキュリティ

README.md

Hi there まいど！ 👋

About Yamato Security

Yamato Security is a security group created by Zach Mathis (@yamatosecurity) in 2012. At first, the main purpose was to provide security training to build a local security community in Western Japan but has grown to provide training, CTF events, webinars, etc... across the country for thousands of people.

Now, with a group of volunteer members, we are providing free open source DFIR tools such as Hayabusa, WELA, Takajo, etc...

Please contact us if you want to help out and contribute.

Main Projects

Popular repositories Loading

  1. hayabusa hayabusa Public

    Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

    Rust 2.4k 208

  2. WELA WELA Public

    WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

    PowerShell 772 83

  3. EnableWindowsLogSettings EnableWindowsLogSettings Public

    Documentation and scripts to properly enable Windows event logs.

    Batchfile 577 52

  4. hayabusa-rules hayabusa-rules Public

    Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.

    Python 148 23

  5. takajo takajo Public

    Takajō (鷹匠) is a Hayabusa results analyzer.

    Nim 98 7

  6. RustyBlue RustyBlue Public

    RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.

    Rust 68 6

Repositories

Showing 10 of 13 repositories
  • hayabusa-rules Public

    Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.

    Yamato-Security/hayabusa-rules’s past year of commit activity
    Python 148 23 4 0 Updated Dec 31, 2024
  • hayabusa Public

    Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

    Yamato-Security/hayabusa’s past year of commit activity
    Rust 2,391 AGPL-3.0 208 36 1 Updated Dec 31, 2024
  • hayabusa-encoded-rules Public

    Encoded Hayabusa and Sigma rules to avoid anti-virus false positives and reduce files stored on target systems.

    Yamato-Security/hayabusa-encoded-rules’s past year of commit activity
    Rust 5 0 0 0 Updated Dec 31, 2024
  • sigma-to-hayabusa-converter Public

    Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.

    Yamato-Security/sigma-to-hayabusa-converter’s past year of commit activity
    Python 9 GPL-3.0 0 3 0 Updated Dec 28, 2024
  • hayabusa-evtx Public

    A fork of the evtx Rust crate for Hayabusa

    Yamato-Security/hayabusa-evtx’s past year of commit activity
    Rust 6 Apache-2.0 2 5 0 Updated Dec 22, 2024
  • takajo Public

    Takajō (鷹匠) is a Hayabusa results analyzer.

    Yamato-Security/takajo’s past year of commit activity
    Nim 98 AGPL-3.0 7 22 0 Updated Dec 5, 2024
  • Presentations Public
    Yamato-Security/Presentations’s past year of commit activity
    16 2 0 0 Updated Nov 5, 2024
  • hayabusa-sample-evtx Public

    Sample evtx files to use for testing hayabusa detection rules

    Yamato-Security/hayabusa-sample-evtx’s past year of commit activity
    45 3 0 1 Updated Nov 4, 2024
  • suzaku-rules Public
    Yamato-Security/suzaku-rules’s past year of commit activity
    1 1 0 0 Updated May 1, 2024
  • EnableWindowsLogSettings Public

    Documentation and scripts to properly enable Windows event logs.

    Yamato-Security/EnableWindowsLogSettings’s past year of commit activity
    Batchfile 577 GPL-3.0 52 1 0 Updated Sep 20, 2023
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…