Oct 13, 2022

Velociraptor for DFIR

Velociraptor - Endpoint visibility and collection tool

Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries. It is an advanced digital forensic and incident response tool that enhances your visibility into your endpoints.

Today, I just see the demo from Carlos Cajigas's on Rapid DFIR Tooling in SANS community night event. It is amazing !!

There is a blog spot from FIRST.org where it shows how Velociraptor vs. PrintNightmare (2021).


Links: