Armory
Source
Browse
MCPs

mcp-hayabusa

Enables an LLM client to scan Windows event log files (EVTX) for suspicious activity using Hayabusa, and browse its detection rules directly in conversation.

Score
Unranked
Evidence
No signals yet
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. thomasxm-crowdsentinel206 stars · 32 forks94.345
  2. hexastrike-eventwhisper49 stars · 7 forks84.595
  3. threatflux-yaraflux23 stars · 6 forks78.510

What it is

Enables an LLM client to scan Windows event log files (EVTX) for suspicious activity using Hayabusa, and browse its detection rules directly in conversation.

When to use it

Enables an LLM client to scan Windows event log files (EVTX) for suspicious activity using Hayabusa, and browse its detection rules directly in conversation.

How to install / invoke

See Glama for the install config.

Notes

Listed from the Glama MCP registry.