66 hayabusa(1) - Kailash Tool Reference

66.1 hayabusa

hayabusa - Windows event-log fast forensics timeline generator.

Layer	CLASSIC
Category	c-09-forensics-ir-reporting
Safety class	safe
Licence	AGPL-3.0-only
Upstream	github.com/notarin/hayabusa

Stale classification

This row is classed stale in the manifest at generation time - check upstream status before relying on it.

66.1.1 NAME

hayabusa - Windows event-log fast forensics timeline generator.

66.1.2 SYNOPSIS & usage

Derived from the upstream README at generation time; verify against --help where the tool is installed.

Usage: hayabusa [OPTIONS]

Options:
  -d, --daemon     Run as daemon
  -b, --benchmark  On exit print the execution time, for benchmarking
  -h, --help       Print help

66.1.3 DESCRIPTION (upstream)

Hayabusa is a swift rust fetch program. When configured for speed it boasts an internal runtime of under 2ms. Despite its speed, this is a fully featured fetch, unlike many of its brethren. It is also extremely configurable, enabling near infinite customization. The level of customization is from the fact that the config file is a lua script in the users config directory. The program is split into a user facing binary and a system service daemon. The daemon is responsible for gathering the system information ahead of time and having it prepared for the user facing binary. This binary then injects said system information into the lua script and extracts the result. While the ascii art is embe

66.1.4 SEE ALSO

Category: c-09-forensics-ir-reporting in the category directory (sister tools listed there).

ref: pin - verified 2026-10-14