# Yamato-Security/hayabusa-rules

<https://repo.masters-masters.com/en/repos/Yamato-Security/hayabusa-rules>

[Home](https://repo.masters-masters.com/en) › [Yamato-Security](https://repo.masters-masters.com/en/owners/Yamato-Security) › [hayabusa-rules](https://repo.masters-masters.com/en/repos/Yamato-Security/hayabusa-rules)

Yamato-Security/hayabusa-rules has 230 stars on GitHub. Its RepoMasters card: Prototype tier. Curated Windows event log Sigma rules used in Hayabusa and…

| Field | Value |
| --- | --- |
| Owner | [Yamato-Security](https://repo.masters-masters.com/en/owners/Yamato-Security) |
| Stars | 230 |
| Forks | 35 |
| Language | [Python](https://repo.masters-masters.com/en/languages/python) |
| License | None |
| Created | 2021 |
| Topics | windows, dfir, event, log, analysis, sigma, hayabusa, mitre, attack |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [Yamato-Security/hayabusa-rules](https://github.com/Yamato-Security/hayabusa-rules) |

## Repository

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

## More repos by Yamato-Security

- [Yamato-Security/hayabusa · ★ 3,436 · Rust · RC](https://repo.masters-masters.com/en/repos/Yamato-Security/hayabusa)
- [Yamato-Security/WELA-deprecated · ★ 775 · PowerShell · Beta](https://repo.masters-masters.com/en/repos/Yamato-Security/WELA-deprecated)
- [Yamato-Security/EnableWindowsLogSettings · ★ 725 · Batchfile · Beta](https://repo.masters-masters.com/en/repos/Yamato-Security/EnableWindowsLogSettings)
- [Yamato-Security/suzaku · ★ 237 · Rust · Prototype](https://repo.masters-masters.com/en/repos/Yamato-Security/suzaku)
- [Yamato-Security/takajo · ★ 168 · Nim · Prototype](https://repo.masters-masters.com/en/repos/Yamato-Security/takajo)
- [Yamato-Security/WELA · ★ 128 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/Yamato-Security/WELA)

## Nearby in Python

- [wonderfulearth/primitive-operation-painter · ★ 230 · Python · Prototype](https://repo.masters-masters.com/en/repos/wonderfulearth/primitive-operation-painter)
- [technamooz/Panel\_Technamooz\_VPN · ★ 230 · Python · Prototype](https://repo.masters-masters.com/en/repos/technamooz/Panel_Technamooz_VPN)
- [michelle11032424-jpg/Interpark- · ★ 230 · Python · Prototype](https://repo.masters-masters.com/en/repos/michelle11032424-jpg/Interpark-)
- [eyeseast/python-tablefu · ★ 230 · Python · Prototype](https://repo.masters-masters.com/en/repos/eyeseast/python-tablefu)
- [wardi/speedometer · ★ 230 · Python · Prototype](https://repo.masters-masters.com/en/repos/wardi/speedometer)
- [craigds/django-typed-models · ★ 230 · Python · Prototype](https://repo.masters-masters.com/en/repos/craigds/django-typed-models)

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.