pyrox.dev
hayabusa-sec: init at 3.3.0-unstable-2025-07-17 (#427422)
+52
pkgs/by-name/ha/hayabusa-sec/package.nix
+52
pkgs/by-name/ha/hayabusa-sec/package.nix
···
1
+
{
2
+
lib,
3
+
rustPlatform,
4
+
fetchFromGitHub,
5
+
pkg-config,
6
+
openssl,
7
+
rust-jemalloc-sys,
8
+
}:
9
+
10
+
rustPlatform.buildRustPackage {
11
+
pname = "hayabusa-sec";
12
+
version = "3.3.0-unstable-2025-07-17";
13
+
14
+
src = fetchFromGitHub {
15
+
owner = "Yamato-Security";
16
+
repo = "hayabusa";
17
+
rev = "feaa165b4c0af34919ad26f634cb684e23172359";
18
+
hash = "sha256-h08InhNVW33IjPA228gv6Enlg6EKmj0yHb/UvJ/f7uw=";
19
+
# Include the hayabusa-rules
20
+
fetchSubmodules = true;
21
+
};
22
+
23
+
cargoHash = "sha256-wcH1Ron5Zx2ypWyaW0z7L9rCanAcosvpPQnP60qbvWQ=";
24
+
25
+
nativeBuildInputs = [
26
+
pkg-config
27
+
];
28
+
29
+
buildInputs = [
30
+
openssl
31
+
rust-jemalloc-sys # transitive dependency via the hayabusa-evtx crate
32
+
];
33
+
34
+
env.OPENSSL_NO_VENDOR = true;
35
+
36
+
# Several checks panic
37
+
# Skipping individual checks causes failure as `--skip` flags
38
+
# end up passed to executing `hayabusa`
39
+
# > error: unexpected argument '--skip' found
40
+
doCheck = false;
41
+
42
+
meta = {
43
+
description = "Sigma-based threat hunting and fast forensics timeline generator for Windows event logs";
44
+
homepage = "https://github.com/Yamato-Security/hayabusa";
45
+
license = lib.licenses.agpl3Plus;
46
+
maintainers = with lib.maintainers; [
47
+
d3vil0p3r
48
+
jk
49
+
];
50
+
mainProgram = "hayabusa";
51
+
};
52
+
}