investigate_jp

Official

AI-driven DFIR and incident reporting.

AuthorYamato-Security
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill automates the complex and time-consuming process of digital forensics and incident response (DFIR) by analyzing Hayabusa logs, generating detailed timelines, and producing comprehensive incident reports.

Core Features & Use Cases

  • Automated Log Analysis: Processes Hayabusa CSV logs to identify critical events, IOCs, and attack patterns.
  • Timeline Generation: Creates a chronological sequence of events, grouped by attack phases.
  • Report Generation: Produces detailed incident reports in Japanese, including executive summaries, IOC lists, and host/account impact analysis.
  • Use Case: When a security incident occurs, feed the Hayabusa analysis results into this Skill to quickly generate a professional incident report, enabling faster decision-making and remediation.

Quick Start

Use the investigate_jp skill to read hayabusa-results.csv and build an intrusion timeline and report.

Dependency Matrix

Required Modules

echarts.min.jsreport.htmlreport.pytimeline_chart.htmltimeline_chart.pymitre_flow.htmlmitre_flow.py

Components

scriptsreferences

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: investigate_jp
Download link: https://github.com/Yamato-Security/mecha-hayabusa/archive/main.zip#investigate-jp

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.