This is the next point release of Velociraptor.
Highlights of this release include:
- Added interactive shell and execve() VQL plugin. It is now possible to write artifacts which run arbitrary commands on the client.
- Server side VQL can be used to watch client monitoring events and raise alerts.
- Added artifact acquisition which allows to run multiple event artifacts concurrently to watch and react to rules.
The details are described in our blog posts: