Skip to content

Commit

Permalink
Create hayabusa_OfflineLogonSummary
Browse files Browse the repository at this point in the history
  • Loading branch information
angry-bender authored Mar 28, 2023
1 parent 84d907d commit c3a6198
Showing 1 changed file with 20 additions and 0 deletions.
20 changes: 20 additions & 0 deletions Modules/Apps/GitHub/Hayabusa/hayabusa_OfflineLogonSummary
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
Description: Hayabusa a timeline generator for Windows event logs - Logon Summary
Category: EventLogs
Author: Georg Lauenstein (sure[secure]) / Angry-Bender
Version: 1.0
Id: -
BinaryUrl: https://github.com/Yamato-Security/hayabusa/releases
ExportFormat: csv
Processors:
-
Executable: hayabusa\hayabusa.exe
CommandLine: logon-summary -l -d %sourceDirectory% --RFC-3339 -o %destinationDirectory%\hayabusa_logon_summary.csv
ExportFormat: csv

# Documentation
# Create a folder "hayabusa" within the "Modules\bin" KAPE folder
# Place "zip archive" file into "Modules\bin\hayabusa" and unpack
# rename the hayabusa executable to hayabusa.exe
# You can delete all except: "config"; "rules" and the "hayabusa.exe"
# Update Rules with: hayabusa.exe update-rules
# Setup for RFC-3339 Time format. Check options for more: hayabusa.exe help

0 comments on commit c3a6198

Please sign in to comment.