svch0stz / velociraptor-detectionsView external linksLinks
☆22Jan 31, 2023Updated 3 years ago
Alternatives and similar repositories for velociraptor-detections
Users that are interested in velociraptor-detections are comparing it to the libraries listed below
Sorting:
- ☆14Oct 24, 2024Updated last year
- Notes from my "Implementing a Kick-Butt Training Program: Blue Team GO!" talk☆13Mar 4, 2019Updated 6 years ago
- ☆24Aug 30, 2019Updated 6 years ago
- Hunt the windows Registry automatically using VQL☆13Jan 6, 2026Updated last month
- ☆12Feb 9, 2025Updated last year
- PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.☆12Aug 26, 2024Updated last year
- Transform EQL detection rules to VQL artifacts☆12Nov 12, 2021Updated 4 years ago
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆28May 5, 2025Updated 9 months ago
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 3 years ago
- Mount VSCs with ease!☆18Jan 22, 2025Updated last year
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆14Jun 27, 2023Updated 2 years ago
- ☆11Mar 12, 2021Updated 4 years ago
- Menu for Thor scanner lite☆20Oct 24, 2025Updated 3 months ago
- VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.☆68Aug 20, 2025Updated 5 months ago
- Random tips and tricks RE: ransomware☆14Aug 17, 2021Updated 4 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆13Jul 16, 2019Updated 6 years ago
- A repository to share publicly available Velociraptor detection content☆196Updated this week
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆36Jul 11, 2023Updated 2 years ago
- ☆12Jun 3, 2022Updated 3 years ago
- Windows 10 Live Information viewer☆37Jan 27, 2022Updated 4 years ago
- Repo to hold mcp server for velociraptor☆29Jul 27, 2025Updated 6 months ago
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆20Aug 3, 2024Updated last year
- Scripts for rapid Windows endpoint "tactical triage" and investigations with Velociraptor and KAPE☆179Jan 20, 2026Updated 3 weeks ago
- PowerShell Module for parsing logs generated by Sysinternals Sysmon for Linux☆37Mar 20, 2022Updated 3 years ago
- A small tool to easily mount APFS image on macOS for forensics.☆16Jul 30, 2020Updated 5 years ago
- A collection of scripts for use with CrowdStrike Falcon RTR☆19Oct 4, 2024Updated last year
- A library implementing a generic SQL like query language.☆21Sep 15, 2025Updated 5 months ago
- Living Under the Land on Linux ~ Bsides Belfast/Vienna 2025☆37Nov 22, 2025Updated 2 months ago
- Python web app for previewing data in a Chrome Profile Folder☆23Jul 1, 2024Updated last year
- ☆18Apr 4, 2019Updated 6 years ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated last year
- Documentation site for Velociraptor☆61Updated this week
- A PowerShell incident response script for quick triage☆81Jul 18, 2022Updated 3 years ago
- CLI tool to compute the TypeRefHash for .NET binaries.☆19Nov 10, 2021Updated 4 years ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆21Updated this week
- A tool for fetching DFIR and other GitHub tools.☆25Aug 2, 2025Updated 6 months ago
- Manage Your Large Team of Consultants☆11Sep 18, 2025Updated 4 months ago
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Jul 27, 2022Updated 3 years ago
- Powershell module for VMWare vSphere forensics☆158Nov 8, 2024Updated last year