cyberstars / tools / suzaku
Suzaku
—Sigma-based threat hunting and timeline generator for cloud logs.
Voir sur GitHub
RustAGPL-3.0
Fast forensics and threat-hunting engine from Yamato Security that applies Sigma detection rules to cloud audit logs such as AWS CloudTrail to surface suspicious activity and build investigation timelines. The cloud-focused counterpart to the team's Windows event log tool Hayabusa.