Verwaltetes Velociraptor

Was ist Velociraptor?

Velociraptor is an advanced open-source endpoint monitoring, digital forensics, and incident response platform. Built for DFIR professionals, it enables rapid threat hunting, evidence collection, and real-time endpoint visibility across your entire fleet.

Anwendungsfälle

• →Incident response and digital forensics investigations
• →Proactive threat hunting across endpoint fleets
• →Complement to Wazuh for deep endpoint visibility
• →Compliance incident documentation with forensic evidence

Funktionen

• Real-time endpoint monitoring and collection
• Velociraptor Query Language (VQL) for custom hunts
• 700+ built-in forensic artifacts
• Fleet-wide threat hunting
• File and process monitoring
• YARA and Sigma rule scanning
• Offline collector for triage
• Multi-platform agents (Windows, Linux, macOS)