Velociraptor
@velocidex
Followers
6K
Following
979
Media
195
Statuses
892
Velocidex is the company behind Velociraptor
Joined September 2019
At @AusCERT conference we presented "Sigma and Detection Engineering with @velocidex Velociraptor". Learn how to implement real time Sigma detection with forensic enhancements. Full presentation and slides
0
33
91
RT @Stealthsploit: Looking forward to speaking on a panel at the @rapid7 Take Command Summit. Register for free below as we talk about be….
rapid7.brighttalk.com
The Take Command Summit is returning for 2025 with another stellar lineup of expert perspectives, critical conversations, and actionable insights designed to arm your organization with the tools to...
0
3
0
RT @chrisdfir: I've recently built a @velocidex #velociraptor VQL artifact to support Linux forensics. This artifact collects metadata abou….
0
5
0
RT @DDI_Training: Do you use @velocidex? 😎🦖 Want to learn more?. Our course is for security analysts, SOC team members, incident responders….
0
5
0
RT @mgreen27: 🚀 I’ve done lot of work on LNK file collection and automated analysis, and I recently updated the publicly available LNK pars….
0
17
0
RT @rapid7: Analysts can overlook lesser-known data points during LNK forensics for cyber threat intelligence, missing valuable insights. 🔍….
rapid7.com
Techniques and Methodology for Advanced Analysis with Velociraptor | Rapid7 Blog
0
4
0
RT @DDI_Training: Wrapping up day 2 of THVR @WWHackinFest 😎. Every time, @eric_capuano makes this stuff look like a breeze . Fun side effec….
0
4
0
Velociraptor release 0.73 is now available for testing! Read about all the cool new features here . An exciting new feature is built in timelining capability. Check the blog post here
2
31
70
RT @_bromiley: @eric_capuano rocking the @velocidex content on Day 3! Students getting ready to hunt all the things. Day 3 @BlackHatEvents….
0
1
0
RT @0xanalyst: I recently conducted a Rapid incident Response utilizing @velocidex session. Here is the session notes with some VQLs that c….
0
6
0
RT @malmoeb: The incident started with a compromised server. When we extended the hunting to the entire network, we found traces of the "Wa….
0
17
0
Great example of VQL automation!.
For any velociraptor users - I have been messing around with plyara over the last week and created a few bulk yara artifacts using Yara-Forge - Velociraptor artifacts:. File - Process.
0
4
17
RT @therealwlambert: Quick and dirty VQL to search for hosts potentially vulnerable to #OpenSSH #regreSSHion 🐛#CVE20246387 in @velocidex #….
0
7
0
RT @scudette: I was so excited about the new 0.72 release of Velociraptor I just could not wait to make a quick video to show you all the n….
0
12
0
📣 Velociraptor v0.7.2 is now live!. The long-awaited release is highlighted by EWF support, dynamic DNS, improved SSH access, secrets management & much more. Read up on all the exciting new features and download it today:
0
23
62
If you are a regular user, you'll no doubt have noticed new features since v0.7.1 that extend forensic capabilities on various systems. Nathanael Ndong shows us how to leverage those new features to perform forensic analysis of a VMware ESXi hypervisor.
0
9
9
Registration is now open for Rapid7's Take Command, a day-long virtual summit in partnership with AWS. You do not want to miss it. You’ll get new attack intelligence, insight into AI disruption, transparent MDR partnerships, and more.
0
0
1
The next @BlackHatEvents USA will be here before you know it! Register for our Velociraptor hands-on training today and get a $600 discount off the registrations fees. You won't want to miss it.
0
2
2
One of the most critical sources of data when responding to an incident on windows systems is the event logs. Read below to explore the windows event log system and see how Velociraptor can be used to work around its limitations.
0
5
32