$ loading_
Scan Windows EVTX logs and inspect Hayabusa detection rules in chat.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "mcp-hayabusa" yet — see the docs or source repo.
Please scan this Windows EVTX event log file, identify suspicious logins, privilege escalation, or lateral movement activity, and summarize high-risk events in a timeline.
A list of suspicious events, a timeline summary, and key risk-related details.
Please list Hayabusa detection rules related to suspicious PowerShell execution and briefly explain what each rule looks for.
Relevant detection rules with short explanations of the suspicious behaviors they target.
Based on the scan results, tell me which events matched detection rules and explain why those rules were triggered.
Matched events, corresponding rules, and explanations of why they were triggered.
Security researchers or DevOps engineers can scan EVTX files to quickly spot suspicious activity and reduce manual event log review time.
When users want to understand why an alert appeared, they can browse Hayabusa detection rules directly in chat to inspect the detection logic.
During incident response for possible intrusions or anomalous behavior, teams can use EVTX scan results and rule explanations to triage high-risk findings.
It enables an LLM client to use Hayabusa to scan Windows event log files (EVTX) for suspicious activity and browse detection rules in conversation.
Based on the provided description, it is designed for Windows event log files (EVTX). For support of other log types, see the source repository.
The provided material does not include installation steps or prerequisites. For runtime, dependencies, and setup details, see the source repository.
Scan Windows EVTX logs with Hayabusa and get structured security detections.
Analyze Windows EVTX logs and retrieve detection rules through Hayabusa tools.
Audit MCP configs for exposed access, secrets, models, and compliance AI-BOMs.
Capture, analyze, and summarize network traffic to diagnose protocol and connection issues.
Analyze log files with natural language to find errors and anomalies fast.
Scan codebases for LLM usage, AI frameworks, and exposed secrets.