MCP server that wraps Hayabusa for Windows event log (EVTX) forensics scanning
3 files for Claude Code: query, detection-engineering, mcp-hayabusa CLAUDE.md — 2,304 tokens loaded in every session.
CLAUDE.md A 2,304 tok .claude/skills/detection-engineering/SKILL.md A 114 tok .claude/commands/query.md A 22 tok These files are msadigo/mcp-hayabusa's own configuration — they tell Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.