This is the next point release for Velociraptor - Digging deeper! This release introduces a number of new features as well as bug fixes and performance enhancements. Thanks everyone for reporting issues through the issue board and Discord!
This release includes many bug fixes and performance improvements, as well as new features:
- Added Github and Azure AD authenticators for SSO.
- Notebooks are now only visible to their creators - users will need to explicitly share them to allow another user to collaborate.
- Added a shell UI in host info screen. This makes it easy to interactively run remote shell commands.
- Switch json encoder to support time serialization. Users can now specify the timezone they would like to see timestamps in.
- Implemented a client KillKillKill message to immediately kill and restart the client.
Noteworthy new artifacts:
- Added artifact to query dns cache Windows.System.DNSCache.
- Add Windows.Remediation.Quarantine artifact allowing endpoints to be isolated but still reachable from Velociraptor.
As always please file issues on the bug tracker or ask questions on our mailing list velociraptor-discuss@googlegroups.com . You can also chat with us directly on discord https://www.velocidex.com/discord
