# mcp-hayabusa

> mcp-hayabusa — chiomao23-mcp-detection-knowledge-bases. Use this tool when you need to analyze Windows Event Log (EVTX) files to identify potential security threats. It solves problems related to event log scanning and detection rule retrieval, providing valuable insights into system security. The tool takes EVTX files as input and outputs scanned event logs and detection rules, making it ideal for cybersecurity investigations and threat hunting.

Canonical page: https://skillsregistry.net/skills/chiomao23-mcp-detection-knowledge-bases  
JSON: https://api.skillsregistry.net/v1/skills/chiomao23-mcp-detection-knowledge-bases

## Description

Enables EVTX (Windows Event Log) analysis via Hayabusa, providing tools to scan event logs and retrieve detection rules.

## Trust

- **Trust score (0–1):** 0.67
- **Verification tier:** scanned
- **Last scanned:** 2026-08-30

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** other
- **Updated:** 2026-08-30

## Source

- **Source listing:** [Glama](https://glama.ai/mcp/servers/lnuqit7w7v)
- **Repository:** <https://github.com/chiomao23/MCP-Detection-Knowledge-Bases>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "chiomao23-mcp-detection-knowledge-bases"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/chiomao23-mcp-detection-knowledge-bases` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/chiomao23-mcp-detection-knowledge-bases/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt
