Velociraptor

Velociraptor: Open-Source Endpoint Visibility and Monitoring Tools

An open-source endpoint visibility and monitoring tool designed to collect system info, monitor for suspicious activity, and respond to threats across networks, lightweight and fast.

What is Velociraptor?

Velociraptor is an open source endpoint visibility and monitoring tool created by Velocidex. It is designed to provide visibility into endpoints across an organization's network by collecting system information, hunting for indicators of compromise, monitoring for suspicious activity, and enabling incident response.

Some key capabilities and features of Velociraptor include:

• Lightweight agent that can be rapidly deployed across Windows, Linux, macOS, and Docker endpoints
• Artifact collection system to gather forensic artifacts, collect files, and run monitoring queries
• Built-in scripts and tools for threat hunting and detection of malicious activity
• Dashboards and reporting to visualize endpoint activity and security status
• Response tools to contain threats like isolating endpoints or killing processes
• Integration with other security products via API, allowing automated response workflows
• Custom scripting and querying to adapt Velociraptor to specific use cases

Overall, Velociraptor aims to provide comprehensive endpoint visibility and security monitoring to help defend organizations against modern threats. Its speed and flexibility make it versatile for use cases like threat hunting, incident response, and compliance auditing across complex and diverse environments.

Velociraptor Features

Official Links