All issues

Search results

Bug: finding ids come from list length, so any deletion yields a duplicate id — and one verification vote then satisfies G11 for two findings

Status: Open.

#47 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Aug 22, 2026

Search-back reconciliation: verify IOCs against the original evtx (needs finding-update + imported search evidence)

Status: Open.

#46 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Aug 21, 2026

Timeline is a detection artifact, not evidence: 95% of collected events never reach it, hiding the C2 beacon on two hosts

Status: Open.

#44 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Aug 20, 2026

No cross-finding consistency gate: findings contradict each other, cite pre-intrusion evidence, and count the IR team's own tooling as the attacker

Status: Open.

#43 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Aug 20, 2026

No channel-coverage check: a Defender channel with 15 crit alerts naming Cobalt Strike was never opened

Status: Open.

#42 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Aug 20, 2026

Add a rarity pass: the decisive event in a real intrusion occurred once in 3.25M events at info level

Status: Open.

#41 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Aug 20, 2026

investigate skill never triages info-level events — 80.6% of the dataset, including the root of domain compromise

Status: Open.

#40 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Aug 20, 2026

Packaging decisions left from #15: package name, Python floor, installability, dev dependency group

Status: Open.

#37 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Aug 4, 2026

Finish the pagination-coda migration (12 of 17 tools still inline it) and split server.py

Status: Open.

#36 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Aug 4, 2026

An unreadable database file leaks a raw DuckDB IOException from every tool, including get_dataset_status, and the session cannot recover

Status: Open.

#34 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Jul 25, 2026

CI hardening: add ruff/mypy/coverage + a Python matrix, run docs --strict on PRs, and unify action pins

enhancementNew feature or requestNew feature or request

low priorityNice to have — hygiene/polishNice to have — hygiene/polish

Status: Open.

#16 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Jul 17, 2026

De-duplicate the EN/JP skill trees; localization has already drifted

bugSomething isn't workingSomething isn't working

enhancementNew feature or requestNew feature or request

medium priorityShould fix — correctness/robustness that bites in practiceShould fix — correctness/robustness that bites in practice

Status: Open.

#11 In Yamato-Security/mecha-hayabusa;

· Shirofune-Security opened on Jul 17, 2026