Skip to content

Home

Mecha Hayabusa is an AI analyzer, DFIR timeline and report generation tool for Hayabusa results, created by Yamato Security. It exposes Hayabusa results to AI assistants (such as Claude) over the Model Context Protocol so you can investigate in natural language.

Get Started Features View on GitHub

Why Mecha Hayabusa?

  • AI-powered investigation

    Explore Hayabusa results with an AI assistant in natural language, over the Model Context Protocol (e.g. Claude).

  • Dataset operations

    Load, manage and operate on Hayabusa result datasets so the AI can reason over them.

  • Query & search

    Query and search across results to zero in on the events that matter.

  • Timeline & analytics

    Build timelines and run analytics to understand the shape of an incident.

  • Detail & IOC analysis

    Drill into event details, decode artifacts (e.g. Base64 PowerShell), and extract IOCs.

  • Report generation

    Generate DFIR timelines and reports from your Hayabusa results.

  • New here?

    Start with the Overview, then head to Getting Started to run it and add it to Claude.

  • What can it do?

    Browse the Features — dataset operations, query & search, timeline & analytics, and detail & IOC analysis.

  • Going further?

    See the Contributors and the main Hayabusa project.