Documentation site for Velociraptor
☆73Jul 18, 2026Updated this week
Alternatives and similar repositories for velociraptor-docs
Users that are interested in velociraptor-docs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Compiler from Sigma rules to VQL☆19May 18, 2026Updated 2 months ago
- Hunt the windows Registry automatically using VQL☆18May 4, 2026Updated 2 months ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 2 months ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆22Apr 16, 2021Updated 5 years ago
- A repository to share publicly available Velociraptor detection content☆205Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆122Oct 8, 2023Updated 2 years ago
- VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.☆93Jun 28, 2026Updated 3 weeks ago
- NTFS file system specimens☆13May 21, 2026Updated 2 months ago
- Indicators of compromise☆20May 18, 2026Updated 2 months ago
- Windows Event Log "Microsoft-Windows-Partition%4Diagnostic.evtx" parser and devices' VSNs extractor.☆20Nov 28, 2023Updated 2 years ago
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆222Jul 14, 2026Updated last week
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆34Jun 5, 2026Updated last month
- This repository serves as a place for community created Targets and Modules for use with KAPE.☆859Jun 17, 2026Updated last month
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆12Jun 1, 2024Updated 2 years ago
- PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.☆12Aug 26, 2024Updated last year
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆38Jul 18, 2024Updated 2 years ago
- ☆15Oct 24, 2024Updated last year
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- A modified fork of Be.HexEditor for use in debug tools☆15Jan 5, 2022Updated 4 years ago
- VMDK Forensic Artifact Extractor (VFAE) is windows based tool written in C++ that extracts files with a known location from VMDK images r…☆17Aug 7, 2015Updated 10 years ago
- C# based evtx parser with lots of extras☆370Jun 17, 2026Updated last month
- An experimental Velociraptor implementation using cloud infrastructure☆26Jun 25, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆22Jan 31, 2023Updated 3 years ago
- ☆26Apr 28, 2026Updated 2 months ago
- Documentation repository☆49Feb 11, 2026Updated 5 months ago
- Digging Deeper....☆4,119Updated this week
- Windows Registry Knowledge Base☆198Jul 4, 2026Updated 2 weeks ago
- Command line access to the Registry☆180May 4, 2026Updated 2 months ago
- ☆22Aug 29, 2024Updated last year
- Transform EQL detection rules to VQL artifacts☆12Nov 12, 2021Updated 4 years ago
- ☆54May 14, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Golang Parser for Microsoft Event Logs☆109Jun 12, 2026Updated last month
- Mount VSCs with ease!☆18Apr 28, 2026Updated 2 months ago
- Forensic cheatsheets for use with cheat☆15Dec 2, 2021Updated 4 years ago
- A preconfigured Velociraptor triage collector☆77Jun 29, 2026Updated 3 weeks ago
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Oct 25, 2023Updated 2 years ago
- MFT parser☆79Apr 26, 2026Updated 2 months ago
- Scanner for certain IoCs☆11Jan 29, 2025Updated last year