|Project Name||Stars||Downloads||Repos Using This||Packages Using This||Most Recent Commit||Total Releases||Latest Release||Open Issues||License||Language|
|Velociraptor||1,927||3 days ago||154||June 22, 2022||68||other||Go|
|Cloud Pipeline||124||12 hours ago||808||apache-2.0||Java|
|Cloud agnostic genomics analysis, scientific computation and storage platform|
|Fragpipe||110||5 days ago||51||other||Java|
|A cross-platform Graphical User Interface (GUI) for running MSFragger and Philosopher - powered pipeline for comprehensive analysis of shotgun proteomics data|
|G2p||101||3 years ago||2|
|G2P: A Genome-Wide-Association-Study Simulation Tool for Genotype Simulation, Phenotype Simulation, and Power Evaluation|
|Cachegrab||67||4 years ago||1||gpl-2.0||C|
|a tool designed to help perform and visualize trace-driven cache attacks against software in the secure world of TrustZone-enabled ARMv8 cores|
|Cellexplorer||61||10 days ago||1||bsd-3-clause||MATLAB|
|CellExplorer is a graphical user interface, a standardized processing module and data structure for exploring and classifying single cells acquired using extracellular electrodes.|
|Pipeviz||57||3 years ago||26||gpl-2.0||C++|
|Pipeviz is a gui tool for constructing and testing gstreamer pipelines|
|Digital Pathology AI|
|Sepia||34||2 months ago||4||mit||MATLAB|
|Matlab GUI pipeline application for quantitative susceptibility mapping (QSM)|
|Sofia||33||10 months ago||22||C++|
|The HI Source Finding Application|
Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries.
To learn more about Velociraptor, read the documentation on:
If you want to see what Velociraptor is all about simply:
Download the binary from the release page for your favorite platform (Windows/Linux/MacOS).
Start the GUI
$ velociraptor gui
This will bring up the GUI, Frontend and a local client. You can collect artifacts from the client (which is just running on your own machine) as normal.
Once you are ready for a full deployment, check out the various deployment options at https://docs.velociraptor.app/docs/deployment/
We have our complete training course (7 sessions x 2 hours each) https://docs.velociraptor.app/training/
The course covers many aspects of Velociraptor in detail.
To run a Velociraptor server via Docker, follow the instructions here: weslambert/velociraptor-docker
Velociraptor is also useful as a local triage tool. You can create a self contained local collector using the GUI:
Start the GUI as above (
Server Artifacts sidebar menu, then
Select and configure the artifacts you want to collect, then select
Uploaded Files tab and download your customized collector.
To build from source, make sure you have a recent Golang installed
from https://golang.org/dl/ (Currently at least Go 1.17) and the go
binary is on your path. In addition make sure the GOBIN directory is
also on your path (Defaults are: on linux and mac
$ git clone https://github.com/Velocidex/velociraptor.git $ cd velociraptor # This will build the GUI elements. You will need to have node # installed first. For example get it from # https://nodejs.org/en/download/. $ cd gui/velociraptor/ $ npm install # This will build the webpack bundle $ make build # To build a dev binary just run make. # NOTE: Make sure ~/go/bin is on your path - # this is required to find the Golang tools we need. $ cd ../.. $ make # To build production binaries $ make linux $ make windows
In order to build Windows binaries on Linux you need the mingw tools. On Ubuntu this is simply:
$ sudo apt-get install mingw-w64-x86-64-dev gcc-mingw-w64-x86-64 gcc-mingw-w64
We have a pretty frequent release schedule but if you see a new feature submitted that you are really interested in, we would love to have more testing prior to the official release.
We have a CI pipeline managed by GitHub actions. You can see the pipeline by clicking the actions tab on our GitHub project. There are two workflows:
Windows Test: this workflow builds a minimal version of the Velociraptor binary (without the GUI) and runs all the tests on it. We also test various windows support functions in this pipeline. This pipeline builds on every push in each PR.
Linux Build All Arches: This pipeline builds complete binaries for many supported architectures. It only runs when the PR is merged into the master branch. To download the latest binaries simply select the latest run of this pipeline, scroll down the page to the "Artifacts" section and download the Binaries.zip file (Note you need to be logged into GitHub to see this).
If you fork the project on GitHub, the pipelines will run on your own fork as well as long as you enable GitHub Actions on your fork. If you need to prepare a PR for a new feature or modify an existing feature you can use this to build your own binaries for testing on all architectures before send us the PR.
Velociraptor is written in Golang and so is available for all the platforms supported by Go. This means that Windows XP and Windows server 2003 are not supported but anything after Windows 7/Vista is.
We build our releases on Centos 6 (x64) for Linux and Sierra for MacOS
so earlier platforms may not be supported by our release pipeline. If
you need 32 bit builds you will need to build from source. You can do
this easily by forking the project on GitHub, enabling GitHub Actions
in your fork and editing the
Linux Build All Arches pipeline.
Velociraptor's power comes from
VQL Artifacts, that define many
capabilities to collect many types of data from endpoints.
Velociraptor comes with many built in
Artifacts for the most common
use cases. The community also maintains a large number of additional
artifacts through the Artifact Exchange.
If you need help performing a task such as deployment, VQL queries etc. Your first port of call should be the Velociraptor Knowledge Base at https://docs.velociraptor.app/knowledge_base/ where you will find helpful tips and hints.
Questions and feedback are welcome at [email protected] (or https://groups.google.com/g/velociraptor-discuss)
You can also chat with us directly on discord https://docs.velociraptor.app/discord
File issues on Velocidex/velociraptor
Read more about Velociraptor on our blog: https://docs.velociraptor.app/blog/
Hang out on Medium https://medium.com/velociraptor-ir
Follow us on Twitter @velocidex