Velociraptor

@velocidex

Velocidex is the company behind Velociraptor

docs.velociraptor.app Joined September 2019

150 Following 6.8K Followers 893 Posts

Latest posts 5

Velociraptor @velocidex May 24, 2025

At @AusCERT conference we presented "Sigma and Detection Engineering with @velocidex Velociraptor". Learn how to implement real time Sigma detection with forensic enhancements.

Full presentation youtube.com/watch?v=3EBrpF… and slides docs.velociraptor.app/presentations/…

Velociraptor @velocidex Sep 21, 2024

Velociraptor release 0.73 is now available for testing! Read about all the cool new features here docs.velociraptor.app/blog/2024/2024… .

An exciting new feature is built in timelining capability. Check the blog post here docs.velociraptor.app/blog/2024/2024…

Velociraptor @velocidex Jul 2, 2024

Great example of VQL automation!

Matthew Green 🌻 Verified account @mgreen27 Jul 1, 2024

For any velociraptor users - I have been messing around with plyara over the last week and created a few bulk yara artifacts using Yara-Forge - yarahq.github.io.

Velociraptor artifacts:

File - github.com/mgreen27/Detec…

Process
github.com/mgreen27/Detec…
github.com/mgreen27/Detec…
github.com/mgreen27/Detec…

Webshell - github.com/mgreen27/Detec…

My automation takes Yara-Forge full ruleset, then seperates rules into buckets to optimise deployment. Updated each week to keep the rules up to date.

#dfir @velocidex
View quoted post on X

Velociraptor @velocidex May 1, 2024

📣 Velociraptor v0.7.2 is now live!

The long-awaited release is highlighted by EWF support, dynamic DNS, improved SSH access, secrets management & much more.

Read up on all the exciting new features and download it today: r-7.co/3Uk9YNN

Velociraptor @velocidex Apr 24, 2024

If you are a regular user, you'll no doubt have noticed new features since v0.7.1 that extend forensic capabilities on various systems. Nathanael Ndong shows us how to leverage those new features to perform forensic analysis of a VMware ESXi hypervisor.

buff.ly/3W9l6Ql