Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard
☆17Oct 21, 2026Updated this week
Alternatives and similar repositories for Hayabusa-Bulk-Runner
Users that are interested in Hayabusa-Bulk-Runner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rust DFIR tool that massively parses cross-platform evidence, even deleted logs, into a lateral movement timeline and graph database.☆26Oct 14, 2026Updated last week
- AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discovery, YAML authoring, deployment, execution moni…☆27Updated this week
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 2 months ago
- ☆22Aug 13, 2026Updated 2 months ago
- A specialized environment for crafting, validating, and testing LimaCharlie detection rules☆15Oct 16, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆17Jan 17, 2026Updated 9 months ago
- A curated reference of threat detection engineering & incident response frameworks, tools, and detection rule sources.☆13Jun 30, 2026Updated 3 months ago
- ☆25Oct 9, 2024Updated 2 years ago
- Valhuntir CLI — AI-augmented incident response platform☆141Updated this week
- ☆77May 11, 2026Updated 5 months ago
- Parses USB connection artifacts from offline Registry hives☆108Feb 8, 2026Updated 8 months ago
- A series of python scripts to extract information from Dark Web Applications☆14Mar 26, 2025Updated last year
- A lightning-fast, lightweight DFIR triage and threat hunting engine for Windows Minidumps (.DMP).☆20Oct 2, 2026Updated 3 weeks ago
- DFIR forensics companion server + capture extension☆35Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving☆44Apr 23, 2020Updated 6 years ago
- This project automates the creation of a complete security lab environment for detection engineering and attack simulation.☆14Aug 8, 2025Updated last year
- ☆36Oct 15, 2026Updated last week
- Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Pyth…☆28Updated this week
- A tool for fetching DFIR and other GitHub tools.☆32Sep 17, 2026Updated last month
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Sep 27, 2026Updated 3 weeks ago
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- Open-source memory forensics platform for DFIR, threat hunting, malware analysis, and incident response.☆29Oct 5, 2026Updated 2 weeks ago
- Local-first, deterministic MCP server for IDA Pro/Home: 109 strict-schema reverse-engineering operations, evidence-backed findings, and p…☆15Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Hunt for SQLite files used by various applications☆32Oct 15, 2026Updated last week
- Best Practices, queries, and packages for CQL the language of CrowdStrike's LogScale (Humio) log manager.☆14May 7, 2026Updated 5 months ago
- A fork of the evtx Rust crate for Hayabusa☆15Oct 8, 2026Updated 2 weeks ago
- Rolling Timeline for Incident Recorder.☆14Dec 4, 2023Updated 2 years ago
- Portable Windows forensic tool for reviewing Firefox-like and Chromium-based browser artifacts, with labeling, search, CLI processing, an…☆57May 10, 2026Updated 5 months ago
- A dockerized version of the sof-elk project☆13Sep 10, 2026Updated last month
- Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.☆16Updated this week
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆381Sep 8, 2026Updated last month
- Offline, open-source AWS CloudTrail DFIR & threat hunting platform — 120+ built-in hunts, 100+ Superset dashboard charts, AI chat, and an…☆24Oct 18, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆119Nov 28, 2023Updated 2 years ago
- Outil de triage automatisé de différents types de collectes d'artefacts.☆18Dec 8, 2025Updated 10 months ago
- Open source, enterprise-ready AI skills for Splunk use cases, built for secure discovery, consistent execution, and production-grade cust…☆62Sep 11, 2026Updated last month
- A Docker lab integrating Splunk SIEM with Ollama LLM via MCP for AI security operations. Features Promptfoo OWASP evaluation, TA-ollama a…☆33Jul 23, 2026Updated 3 months ago
- Logpresso Mini and community contents for incident response☆22Oct 21, 2021Updated 5 years ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆121Updated this week
- A repo to hold KQL queries as part of my 100 days of KQL effort.☆19Aug 5, 2026Updated 2 months ago