Windows.Hayabusa.Monitoring artifact #
This artifact contains rules designed to triage a Windows host
Base Artifact: Windows.Sigma.BaseEvents
You can download the artifact pack here Velociraptor-Hayabusa-Monitoring.zip and customize using instructions at Customizing Artifacts