How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Elastic Security detection content for Endpoint
The main features of elastic/protections-artifacts are: Forensics and Incident Response, Detection Content Libraries, Yara Rule Collections.
Open-source alternatives to elastic/protections-artifacts include: velocidex/velociraptor — Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and… abdulrhmanalfaifi/fennec. accenture/docker-plaso. activecm/beaker. advanced-threat-research/iocs — Repository containing IOCs, CSV and MISP JSON from our blogs. 3coresec/automata.