Velociraptor - Endpoint visibility and collection tool
Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries. It is an advanced digital forensic and incident response tool that enhances your visibility into your endpoints.
Today, I just see the demo from Carlos Cajigas's on Rapid DFIR Tooling in SANS community night event. It is amazing !!
There is a blog spot from FIRST.org where it shows how Velociraptor vs. PrintNightmare (2021).
Links: