Pirate-Kitty/hayabusa-mcp-security-scanner
Command Claude Code
Scan an EVTX file with Hayabusa, map findings to MITRE ATT&CK coverage, and write a dated investigation note under investigations/, cross-linking prior related investigations.
Pirate-Kitty/hayabusa-mcp-security-scanner
Command Claude Code
Scan an EVTX file with Hayabusa, map findings to MITRE ATT&CK coverage, and write a dated investigation note under investigations/, cross-linking prior related investigations.
Pirate-Kitty/hayabusa-mcp-security-scanner
Command Claude Code
Triage an EVTX file with Hayabusa, map findings to MITRE ATT&CK techniques and Rule IDs, assign a single triage outcome, and write a case note under investigations/triage/, cross-linking related notes on verified overlap only.
Pirate-Kitty/hayabusa-mcp-security-scanner
Hook Claude Code
Runs when a session starts, executing session_start_check.py. From Pirate-Kitty/hayabusa-mcp-security-scanner.
Pirate-Kitty/hayabusa-mcp-security-scanner
Hook Claude Code
Runs before the agent uses a tool for Write and Edit tool calls, executing protect_sensitive_paths.py. From Pirate-Kitty/hayabusa-mcp-security-scanner.
Pirate-Kitty/hayabusa-mcp-security-scanner
Hook Claude Code
Runs after a tool call finishes for Write and Edit tool calls, executing validate_rule_hook.py. From Pirate-Kitty/hayabusa-mcp-security-scanner.
Pirate-Kitty/hayabusa-mcp-security-scanner
Hook Claude Code
Runs when the agent finishes a response, executing stop_notify.py. From Pirate-Kitty/hayabusa-mcp-security-scanner.
Pirate-Kitty/hayabusa-mcp-security-scanner
Settings file Claude Code
Agent settings declaring 4 hook events (SessionStart, PreToolUse, PostToolUse, Stop).
Pirate-Kitty/hayabusa-mcp-security-scanner
Skill Claude CodeCodex
Workflow for authoring, validating, and checking MITRE ATT&CK coverage of Hayabusa/Sigma detection rules in this repo. Use when the user asks to write a Sigma rule, write a Hayabusa detection rule, check MITRE ATT&CK technique coverage, draft a new EVTX detection, or validate a rule's YAML before adding it to the rule…
Pirate-Kitty/hayabusa-mcp-security-scanner
MCP server Claude CodeCodexCursor +2
MCP server "hayabusa-mcp" as configured in Pirate-Kitty/hayabusa-mcp-security-scanner. Runs ${CLAUDE_PROJECT_DIR:-.}/server.py with ${CLAUDE_PROJECT_DIR:-.}/.venv/bin/python.
Pirate-Kitty/hayabusa-mcp-security-scanner
Instructions file
Claude Code instructions for Pirate-Kitty/hayabusa-mcp-security-scanner, covering claude.md, project overview, goals, stack and skills.