Three Open-Source Tools Created by NTT DATA Group Employees Selected for Black Hat USA 2025 Arsenal Showcase

NTT DATA Group, a global leader in digital business and technology services, today announced that three innovative open-source cybersecurity tools developed by its employees have been selected for the prestigious Black Hat USA 2025 Arsenal Showcase. This recognition highlights NTT DATA’s significant contributions to the global cybersecurity community and its commitment to fostering open-source innovation.

The Black Hat Arsenal is a highly sought-after platform where researchers and developers demonstrate their latest open-source tools and products, fostering an interactive environment for attendees to engage with advanced security research. The selection of three tools from NTT DATA Group underscores the company’s expertise and dedication to addressing evolving cyber threats.

The selected tools are:

• SigmaOptimizer: This innovative tool leverages Large Language Models (LLMs) to automate the end-to-end generation, validation, and optimization of Sigma rules. Sigma rules are crucial for detecting security anomalies and alerts across IT environments. SigmaOptimizer aims to drastically reduce the time and expertise traditionally required for rule creation, a significant boon for Security Operation Centers (SOCs) grappling with increasingly sophisticated cyberattacks. Its ability to generate rules based on real-world attack logs and integrate with platforms like MITRE Caldera makes it particularly effective for rapid incident response and threat hunting.
• Hayabusa: Developed in collaboration with the Japanese security community Yamato Security, Hayabusa is a fast forensic tool designed for rapid analysis and threat detection in Windows event logs. It streamlines the often complex and time-consuming process of digital forensics and incident response (DFIR), providing security professionals with high-accuracy threat surfacing capabilities, even in environments without extensive EDR or SIEM solutions. Its easy-to-use command-line interface makes advanced forensic analysis accessible to a wider range of practitioners.
• Suzaku: Also a product of the collaboration with Yamato Security, Suzaku complements Hayabusa by focusing on efficient investigation and visualization of cloud logs. As organizations increasingly migrate to cloud environments, the ability to quickly analyze and respond to cloud-based threats is paramount. Suzaku offers crucial support for faster response times in cloud incidents, providing a much-needed tool for effective cloud security posture management.

These tools were developed by employees primarily from NTTDATA-CERT, the company’s Computer Security Incident Response Team, showcasing their practical experience and proactive approach to cybersecurity. The selection for Black Hat USA 2025 Arsenal not only validates the technical capabilities and real-world applicability of these open-source projects but also reinforces NTT DATA’s dedication to contributing to the collective defense against cybercrime through community collaboration.