Velociraptor

A powerful endpoint visibility and digital forensics platform for scalable threat hunting and incident response.

Velociraptor is an open-source endpoint visibility and response (EDR) framework designed for fast, scalable, and flexible threat hunting, live forensics, and incident response. Created by security professionals for security professionals, Velociraptor allows defenders to interrogate endpoints across enterprise networks in real time using a custom query …