This is the next point release for Velociraptor - Digging deeper! This release introduces a number of new features as well as bug fixes and performance enhancements. Thanks everyone for reporting issues through the issue board and Discord!
This release includes many bug fixes and performance improvements, as well as new features:
- Fix headers parameters in http_client plugin.
- Group by now supports expressions.
- Linux filesystem accessor now follows symlinks: It now has symlink cycle detection.
- Added a cache VQL plugin which stores data for a time. This enables VQL for recursive walking of process parent tree
As always please file issues on the bug tracker or ask questions on our mailing list velociraptor-discuss@googlegroups.com . You can also chat with us directly on discord https://www.velocidex.com/discord
Known issues (fixed in the 0.5.0-1 release).
- A client uploader bug was discovered when uploading files with the "file" accessor
- Server not able to start when custom artifacts are specified in for the server monitoring tables.