This is the next point release for Velociraptor. This release coincides with the launch of the new Velociraptor documentation site at https://docs.velociraptor.velocidex.com/docs/ .
Some of the notable changes:
-
We have started to distribute Velociraptor as a signed MSI now. This makes deployment even easier than before. There is also an interactive configuration wizard which should help you get started in most common deployment scenarios. Read the getting started guide to see how to deploy Velociraptor.
-
We added a generic file finder artifact. This replaces the old deprecated flow of the same name. It is one of the more powerful artifacts and forms the basis to many others. Read more about it here
-
There are many GUI changes including a built in dashboard (you can still use Grafana but in most cases the built in dashboard is sufficient). Read the User Interface guide for a description of the new interface.
-
Many new binary parsers including AppCompatCache keys, sqlite and prefetch files.
-
We also have a new logo! Let us know if you like it...
As always, please file any issues to the issue board and ask your questions on the mailing list.