$ loading_
Scan Windows EVTX logs and inspect Hayabusa detection rules in chat.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "mcp-hayabusa" yet — see the docs or source repo.
Please scan this Windows EVTX event log file, identify suspicious logins, privilege escalation, or lateral movement activity, and summarize high-risk events in a timeline.
A list of suspicious events, a timeline summary, and key risk-related details.
Please list Hayabusa detection rules related to suspicious PowerShell execution and briefly explain what each rule looks for.
Relevant detection rules with short explanations of the suspicious behaviors they target.
Based on the scan results, tell me which events matched detection rules and explain why those rules were triggered.
Matched events, corresponding rules, and explanations of why they were triggered.
Security researchers or DevOps engineers can scan EVTX files to quickly spot suspicious activity and reduce manual event log review time.
When users want to understand why an alert appeared, they can browse Hayabusa detection rules directly in chat to inspect the detection logic.
During incident response for possible intrusions or anomalous behavior, teams can use EVTX scan results and rule explanations to triage high-risk findings.
It enables an LLM client to use Hayabusa to scan Windows event log files (EVTX) for suspicious activity and browse detection rules in conversation.
Based on the provided description, it is designed for Windows event log files (EVTX). For support of other log types, see the source repository.
The provided material does not include installation steps or prerequisites. For runtime, dependencies, and setup details, see the source repository.
Analyze Windows EVTX logs and retrieve detection rules through Hayabusa tools.
Analyze Windows event logs and EVTX files for forensics and threat hunting.
Audit MCP configs for exposed access, secrets, models, and compliance AI-BOMs.
Use MCP to query and operate Hack The Box resources via API.
Manage Nessus scans, analyze vulnerabilities, and generate security reports via MCP.
Analyze log files with natural language to find errors and anomalies fast.