Skip to content

Velociraptor

Forensics & Incident Response

An endpoint visibility and collection tool that lets you query hosts with VQL to gather state information.

Go Latest v0.77.1 · 1mo ago Security brief →

Features

  • Collect host‑based state using The Velociraptor Query Language (VQL)
  • Run a local GUI for quick triage on your own machine
  • Deploy as a Docker container or build from source with Golang
  • Access an Artifact Exchange for community‑contributed collection plugins

Recent releases

View all 4 releases →

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
4,107
Forks
634
Languages
Go JavaScript CSS

Install & Platforms

Install via
binary docker go
Platforms
linux macos windows

Beta — feedback welcome: [email protected]