Takajo

<div align="center"> <p> <img alt="Takajo Logo" src="https://raw.githubusercontent.com/Yamato-Security/takajo/main/logo.png" width="50%"> </p> <p> <b>Takajō (鷹匠) is a fast forensics analyzer for Hayabusa results, written in Nim.</b><br/> Created by <a href="https://github.com/Yamato-Security">Yamato Security</a> — it analyzes <a href="https://github.com/Yamato-Security/hayabusa">Hayabusa</a>'s "catches" (results). </p> <p> <a href="https://github.com/Yamato-Security/takajo/releases"><img src="https://img.shields.io/github/v/release/Yamato-Security/takajo?color=blue&label=Stable%20Version&style=flat"/></a> <a href="https://github.com/Yamato-Security/takajo/releases"><img src="https://img.shields.io/github/downloads/Yamato-Security/takajo/total?style=flat&label=GitHub%F0%9F%A6%85Downloads&color=blue"/></a> <a href="https://github.com/Yamato-Security/takajo/stargazers"><img src="https://img.shields.io/github/stars/Yamato-Security/takajo?style=flat&label=GitHub%F0%9F%A6%85Stars"/></a> <a href="https://github.com/Yamato-Security/takajo/blob/main/LICENSE.txt"><img src="https://img.shields.io/badge/License-AGPLv3-blue.svg?style=flat"/></a> <a href="https://codeblue.jp/2022/en/talks/?content=talks_24"><img src="https://img.shields.io/badge/CODE%20BLUE%20Bluebox-2022-blue"></a> <a href="https://www.seccon.jp/2022/seccon_workshop/windows.html"><img src="https://img.shields.io/badge/SECCON-2023-blue"></a> <a href="https://www.sans.org/cyber-security-training-events/digital-forensics-summit-2023/"><img src="https://img.shields.io/badge/SANS%20DFIR%20Summit-2023-blue"></a> <a href="https://bsides.tokyo/2024/"><img src="https://img.shields.io/badge/BSides%20Tokyo-2024-blue"></a> <a href="https://www.hacker.or.jp/hack-fes-2024/"><img src="https://img.shields.io/badge/Hack%20Fes.-2024-blue"></a> <a href="https://hitcon.org/2024/CMT/"><img src="https://img.shields.io/badge/HITCON-2024-blue"></a> <a href="https://www.blackhat.com/sector/2024/briefings/schedule/index.html#performing-dfir-and-threat-hunting-with-yamato-security-oss-tools-and-community-driven-knowledge-41347"><img src="https://img.shields.io/badge/SecTor-2024-blue"></a> <a href="https://twitter.com/SecurityYamato"><img src="https://img.shields.io/twitter/follow/SecurityYamato?style=social"/></a> </p> <h2> 📖 <a href="https://yamato-security.github.io/takajo/">Read the Documentation&nbsp;→</a> </h2> _{Available in 15 languages — English · 日本語 · 繁體中文 · 한국어 · Deutsch · Türkçe · Français · Español · Português (Brasil) · Українська · हिन्दी · Bahasa Indonesia · မြန်မာဘာသာ · ไทย · العربية} </div>

---

🦅 About

Takajō (鷹匠) is a fast forensics analyzer for Hayabusa results, written in memory-safe Nim. Takajō means "Falconer" in Japanese and was chosen as it analyzes Hayabusa's "catches" (results) — extracting indicators, building focused timelines and process trees, stacking events, generating HTML reports, looking up artifacts on VirusTotal, and more.

📖 Documentation

All documentation now lives on a dedicated, searchable, multi-language site:

👉 yamato-security.github.io/takajo

| Section | | | --- | --- | | 🚀 Getting Started | Download, install and build Takajō | | ⌨️ Command Reference | Every command, grouped by category | | ✨ Features | What Takajō can do | | 📦 Resources | Companion projects, changelog, contributing |

⬇️ Download

Grab the latest binaries from the Releases page, or see Getting Started for building from source.

🗂️ Looking for the old README?

The previous single-page README is preserved unchanged:

• 📄 OLD-README.md — English
• 📄 OLD-README-Japanese.md — 日本語

🤝 Contributing & License

Contributions and bug reports are welcome — see Contributing & Support. Takajō is released under the GNU AGPLv3 license.

---

<div align="center"> Made with 🦅 by <a href="https://github.com/Yamato-Security">Yamato Security</a> &nbsp;·&nbsp; <a href="https://twitter.com/SecurityYamato">@SecurityYamato</a> </div>