Alternatives

Hayabusa alternatives for AI agents.

Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.

Current skill

Hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

100
Quality
95
Trust
3.2K
Stars
#1

Uac

Similarity 130Trust 91Excellent 100

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

1.4K starsMay 28, 2026 pushdevopsShellIncident Response
$ npx skills add tclahr/uac
#2

My Arsenal Of Aws Security Tools

Similarity 125Trust 91Excellent 100

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

9.5K starsApr 17, 2026 pushdevopsShellIncident Response
$ npx skills add toniblyx/my-arsenal-of-aws-security-tools
#3

Volatility3

Similarity 123Trust 89Excellent 100

Volatility 3.0 development

4.2K starsMay 26, 2026 pushdevopsPythonIncident Response
$ npx skills add volatilityfoundation/volatility3
#4

Sleuthkit

Similarity 123Trust 90Excellent 100

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

3.1K starsJun 12, 2026 pushdevopsCIncident Response
$ npx skills add sleuthkit/sleuthkit
#5

Forensictools

Similarity 122Trust 82Strong 76

Collection of forensic tools

695 starsJan 12, 2026 pushdevopsInno SetupIncident Response
$ npx skills add cristianzsh/forensictools
#6

AiSOC

Similarity 122Trust 93Excellent 100

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

1.4K starsJun 15, 2026 pushdevopsPythonIncident Response
$ npx skills add beenuar/AiSOC
#7

Cortex

Similarity 122Trust 91Excellent 100

Cortex: a Powerful Observable Analysis and Active Response Engine

1.6K starsMay 20, 2026 pushdevopsScalaIncident Response
$ npx skills add TheHive-Project/Cortex
#8

Ir Rescue

Similarity 122Trust 68Needs review 48

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

489 starsFeb 21, 2021 pushdevopsBatchfileIncident Response
$ npx skills add diogo-fernan/ir-rescue
#9

RdpCacheStitcher

Similarity 121Trust 71Needs review 46

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

328 starsSep 3, 2023 pushdevopsC++Incident Response
$ npx skills add BSI-Bund/RdpCacheStitcher
#10

Intelmq

Similarity 121Trust 93Excellent 96

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

1.1K starsApr 28, 2026 pushdevopsPythonIncident Response
$ npx skills add certtools/intelmq
#11

MindMaps

Similarity 121Trust 69Needs review 46

#ThreatHunting #DFIR #Malware #Detection Mind Maps

307 starsNov 13, 2021 pushdevopsIncident ResponseClaude Code
$ npx skills add nasbench/MindMaps
#12

Loki RS

Similarity 120Trust 83Strong 82

🐍 High-performance, multi-threaded YARA & IOC scanner

327 starsJun 15, 2026 pushdevopsRustIncident Response
$ npx skills add Neo23x0/Loki-RS
#13

CyberThreatHunting

Similarity 118Trust 77Promising 56

A collection of resources for Threat Hunters

915 starsOct 15, 2024 pushdevopsPythonIncident Response
$ npx skills add A3sal0n/CyberThreatHunting
#14

AzureHunter

Similarity 117Trust 74Promising 55

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

790 starsOct 29, 2022 pushdevopsPowerShellIncident Response
$ npx skills add darkquasar/AzureHunter
#15

Catalyst

Similarity 116Trust 88Strong 84

⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

530 starsJun 2, 2026 pushdevopsVueIncident Response
$ npx skills add SecurityBrewery/catalyst
#16

Assemblyline

Similarity 116Trust 85Strong 84

AssemblyLine 4: File triage and malware analysis

508 starsJun 15, 2026 pushdevopsPythonIncident Response
$ npx skills add CybercentreCanada/assemblyline

How to choose

When should you switch?

Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Hayabusa if it already passes your workflow test and repository review.

Next step

Compare top candidates side by side

Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.