MCP server wrapping the Hayabusa Windows event log forensic analysis CLI for AI-assisted threat hunting.
Latest release v0.1.0 · 23 Jul 2026
11 files for Claude Code: ingest-ti, investigate-endpoint, query, SessionStart and 7 more — 4,790 tokens loaded in every session.
CLAUDE.md B 4,790 tok .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/skills/detection-engineering/SKILL.md A 54 tok .claude/skills/ingest-ti/SKILL.md A 60 tok .claude/commands/ingest-ti.md A 37 tok .claude/commands/investigate-endpoint.md A 28 tok .claude/commands/query.md A 9 tok These files are omeryemba/mcp-hayabusa's own configuration — they tell Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.