Velociraptor

Velociraptor by Velocidex is an open-source endpoint monitoring and digital forensics tool. The software is designed to help security professionals with endpoint visibility and incident response investigations.

• The software provides real-time visibility into endpoint activities and system processes.
• It also allows forensic data collection from endpoints and incident response procedures for enhanced threat hunting and analysis.
• Videos and screenshots of desktops and processes can be captured, and investigation results can be stored in offline databases for future reference.

Velociraptor by Velocidex features include:

1. Customized queries that allow you to search through a vast amount of data to find relevant information.
2. An extensible interface that supports Python scripting for customization.
3. Built-in support for more than 300 artifacts that allow users to perform comprehensive system investigations in no time.

Velociraptor by Velocidex is a useful tool for information security professionals, forensic investigators, or any organization looking for an efficient way to monitor their endpoint activities and instantly respond to incidents.