Thor Artifacts for Velociraptor
☆19Dec 2, 2025Updated 11 months ago
Alternatives and similar repositories for velociraptor-artifacts-thor
Users that are interested in velociraptor-artifacts-thor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An experimental Velociraptor implementation using cloud infrastructure☆26Updated this week
- A Compiler from Sigma rules to VQL☆21Oct 19, 2026Updated 2 weeks ago
- CLI generator for Velociraptor offline collector☆17Sep 15, 2026Updated last month
- Hunt the windows Registry automatically using VQL☆18Oct 27, 2026Updated last week
- IRIS Module to Run Any Velociraptor Artifact☆16Mar 31, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Velociraptor ai skills☆18Sep 28, 2026Updated last month
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 9 months ago
- THOR Thunderstorm Collectors☆31Updated this week
- ☆18Oct 24, 2024Updated 2 years ago
- dnmap is a framework to distribute nmap scans among several clients. It reads an already created file with nmap commands and send those c…☆13Mar 19, 2019Updated 7 years ago
- A collections of VQL (Velociraptor Query Language) files used for the extraction of crucial data during incident response procedures usin…☆10Aug 21, 2025Updated last year
- A repository to share publicly available Velociraptor detection content☆210Updated this week
- VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.☆96Jun 28, 2026Updated 4 months ago
- ☆10May 19, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A quick and dirty script to change the local username, hostname, and DNS name (domain) of the host. Designed for malware sandboxes :)☆11Apr 3, 2023Updated 3 years ago
- Initial triage of Windows Event logs☆106Jun 16, 2024Updated 2 years ago
- ☆13Apr 2, 2022Updated 4 years ago
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆14Jun 27, 2023Updated 3 years ago
- ☆54May 14, 2024Updated 2 years ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆23May 29, 2023Updated 3 years ago
- Scripts and lists to help generate YARA friendly string mutations☆23Apr 9, 2023Updated 3 years ago
- [Moved to Codeberg] Tools for inspecting YARA bytecode☆22Jul 1, 2020Updated 6 years ago
- Listing of YARA rules I wrote for Live and Retro hunts. Includes Jupyter infostealer, suspicious powershell, dll hijacking, vbs downloade…☆17Oct 14, 2026Updated 2 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- KQL Sentinel and Defender Detection and Hunting Queries.☆16Aug 17, 2026Updated 2 months ago
- This repo is all about Blue teamming and CyberDefenders Write-up for their DFIR challenges☆18Nov 5, 2023Updated 2 years ago
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆122Oct 8, 2023Updated 3 years ago
- Repository for different Windows DFIR related CMDs, PowerShell CMDlets, etc, plus workshops that I did for different conferences or event…☆76Jul 13, 2021Updated 5 years ago
- Venture: Cross-Platform GUI tool for parsing and analyzing Windows event logs☆96Jan 23, 2025Updated last year
- Repo to hold mcp server for velociraptor☆41Oct 11, 2026Updated 3 weeks ago
- Scrapes Audit Logs From Cloudflare and Streams to Std Out☆11May 6, 2025Updated last year
- Work in Progress repo☆16Apr 18, 2019Updated 7 years ago
- Detection rule validation☆43Oct 25, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- EnumVolcano is an open source Bash script which is used to perform automated enumeration for privilege escalation. This tool is dedicated…☆23May 8, 2022Updated 4 years ago
- Open KLara Project☆37May 18, 2026Updated 5 months ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 5 months ago
- These are installation notes based on Mayfly's installation notes. They are more streamlined for Vagrant as I did not take the Docker rou…☆27Jun 19, 2024Updated 2 years ago
- RITSEC Weekly Labs☆12Mar 3, 2019Updated 7 years ago
- Compromise a web application and delve deeper into the network to access hosts that you cannot directly reach from your attack host using…☆28May 6, 2024Updated 2 years ago
- ☆12Jul 30, 2026Updated 3 months ago