Senrigan

Offline, open-source AWS CloudTrail DFIR & threat hunting platform.
By Yamato Security — 100+ built-in hunts, 80+ Superset dashboard charts, AI chat, and an AWS Config resource graph, all on your laptop with a single make up.

📖 Read the Documentation →

_{Available in 15 languages — English · 日本語 · 繁體中文 · 한국어 · Deutsch · Türkçe · Français · Español · Português (Brasil) · Українська · हिन्दी · Bahasa Indonesia · မြန်မာဘာသာ · ไทย · العربية}

---

🦅 About

Senrigan is an offline, open-source AWS CloudTrail DFIR & threat hunting platform. Drop in your CloudTrail logs and get 100+ ready-to-run threat hunts, 80+ pre-built Apache Superset dashboard charts, AI-assisted chat analysis, Suzaku results visualization, HTML threat-hunting reports, and an AWS Config resource graph — all on your laptop with a single make up. No SIEM required, no cloud infrastructure needed.

📖 Documentation

All documentation now lives on a dedicated, searchable, multi-language site:

👉 yamato-security.github.io/senrigan

Section
🚀 Getting Started	Prerequisites, quick start with Docker
🔎 Reference	100+ built-in hunts and 80+ dashboard charts
🧩 Modules	ingester, agent, dashboard, config_viz
🏛️ Architecture	How it all fits together

🗂️ Looking for the old README?

The previous single-page README is preserved unchanged:

• 📄 OLD-README.md

📜 License

Senrigan is released under the GNU AGPLv3 license.

---

Made with 🦅 by Yamato Security  ·  @SecurityYamato