Velociraptor
An endpoint visibility and collection tool using the Velociraptor Query Language (VQL) for host-based state information gathering.
What is Velociraptor?
Velociraptor is an endpoint visibility and collection tool designed for gathering host-based state information using the Velociraptor Query Language (VQL). It solves the problem of obtaining detailed forensic data from endpoints during security incidents, investigations, or continuous monitoring. The tool allows security teams to collect artifacts, run queries, and analyze system activities across multiple platforms.
Security professionals, incident responders, digital forensic investigators, and IT teams responsible for endpoint monitoring and threat hunting.
Developers choose Velociraptor for its powerful VQL language that provides fine-grained control over data collection, its extensible artifact system, and the ability to deploy it as a self-hosted solution for complete control over sensitive forensic data.
Overview
Digging Deeper....
Use Cases
Best For
- Collecting forensic artifacts during incident response investigations
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
