This is the next point release of Velociraptor. This release introduces a number of new features as well as bug fixes and performance enhancements. Thanks everyone for reporting issues through the issue board and Discord!

New Features

• Support reading gzipped datastore files - you can now just gzip the entire datastore when you run out of space
• Plist parser and MacOS artifacts
• "config generate" now allows merging a JSON config - this is useful to automate config generation
• Cancelled flows remove related messages from the client's buffer file
• Recursive VFS refresh implemented now
• CSRF protection to GUI
• parse_evtx() can accept a message database for message resolution

As always file issues on the bug tracker or ask questions on our mailing list velociraptor-discuss@googlegroups.com . You can also chat with us directly on discord https://www.velocidex.com/discord