Velociraptor

Velociraptor is a unique, advanced open-source endpoint monitoring, digital forensic and cyber response platform.

It was developed by Digital Forensic and Incident Response (DFIR) professionals who needed a powerful and efficient way to hunt for specific artifacts and monitor activities across fleets of endpoints. Velociraptor provides you with the ability to more effectively respond to a wide range of digital forensic and cyber incident response investigations and data breaches:

• Reconstruct attacker activities through digital forensic analysis
• Hunt for evidence of sophisticated adversaries
• Investigate malware outbreaks and other suspicious network activities
• Monitory continuously for suspicious user activities, such as files copied to USB devices
• Discover whether disclosure of confidential information occurred outside the network
• Gather endpoint data over time for use in threat hunting and future investigations