This is the next point release of Velociraptor. This release introduces a number of new features as well as bug fixes and performance enhancements. Thanks everyone for reporting issues through the issue board and Discord!
New Features
- Support reading gzipped datastore files - you can now just gzip the entire datastore when you run out of space
- Plist parser and MacOS artifacts
- "config generate" now allows merging a JSON config - this is useful to automate config generation
- Cancelled flows remove related messages from the client's buffer file
- Recursive VFS refresh implemented now
- CSRF protection to GUI
- parse_evtx() can accept a message database for message resolution
As always file issues on the bug tracker or ask questions on our mailing list velociraptor-discuss@googlegroups.com . You can also chat with us directly on discord https://www.velocidex.com/discord