Ir Velociraptor · AgentSecOps/SecOpsAgentKit
Endpoint forensics and incident response with Velociraptor
Collect forensic evidence, hunt for indicators of compromise, and monitor endpoints across a fleet using Velociraptor Query Language, useful during active incident response or proactive threat hunting investigations.
Good for
- Collect forensic evidence from multiple endpoints during an investigation
- Hunt for indicators of compromise across an endpoint fleet
- Build custom forensic artifacts for specific threat scenarios
- Source repository
- AgentSecOps/SecOpsAgentKit
- Category
- Coding
Open-source skills are maintained by their authors and listed as published, with attribution. Results depend on how well the skill fits your task and material.
A good place to start
Help me write a Velociraptor VQL query to hunt for suspicious persistence mechanisms across our endpoints during this incident response.
Make your next great thing.
Bring a question, a file, or an idea that’s not quite there yet.