Velocidex

Velocidex's repositories

velociraptor

Digging Deeper....

Language:GoNOASSERTION2654 70 1031

WinPmem

The multi-platform memory acquisition tool.

Language:CApache-2.0589 25 32

c-aff4

An AFF4 C++ implementation.

Language:C++Apache-2.0180 18 63

go-ntfs

An NTFS file parser in Go

Language:GoApache-2.063 6 16

Linpmem

Linpmem is a linux memory acquisition tool

Language:CGPL-2.056 2 1

go-pe

A Portable Executable parser for Golang

Language:GoApache-2.045 7 4

oleparse

Golang parser for OLE files

Language:GoMIT30 5 2

velociraptor-docs

Documentation site for Velociraptor

Language:HTMLNOASSERTION28 7 14

go-ese

Go implementation of an Extensible Storage Engine parser

Language:GoApache-2.025 5 6

vfilter

A library implementing a generic SQL like query language.

Language:GoApache-2.018 50

cloudvelo

An experimental Velociraptor implementation using cloud infrastructure

Language:GoNOASSERTION17 40

pyvelociraptor

PyVelociraptor contains the python bindings for the Velociraptor API.

Language:PythonNOASSERTION14 3 2

go-yara

Go bindings for YARA

Language:CBSD-2-Clause12 50

regparser

A Golang Registry parser

Language:GoApache-2.010 4 1

vtypes

VTypes is a data driven binary parsing system in Go.

Language:GoApache-2.010 40

Tools

Distribute third party tools for use with Velociraptor

8 30

SQLiteHunter

Hunt for SQLite files used by various applications

Language:GoAGPL-3.07 4 3

binparsergen

Binary Parser Generator for Go

Language:GoApache-2.05 3 1

ordereddict

A simple Ordered Dict implementation.

Language:GoApache-2.04 30

velociraptor-sigma-rules

A Compiler from Sigma rules to VQL

Language:Go4 6 3

Audit

Collection of Audit and Compliance related VQL artifacts

Language:Go2 40

go-ewf

A Library for reading EWF files

Language:GoApache-2.0200

go-fat

Parser for FAT filesystems

Language:GoApache-2.02 20

presentations

Presentations and Workshops

Language:HTML2 20

etw

Go library for ETW (Event Tracing for Windows) events processing

Language:GoMIT1 30

registry_hunter

Hunt the windows Registry automatically using VQL

Language:RebolMIT100

sigma-go

A Go implementation and parser for Sigma rules.

Language:GoMIT1 10

grok

simple library to use/parse grok patterns with go (100%)

Language:GoApache-2.0010

sflags

Generate flags by parsing structures

Language:GoBSD-3-Clause020

ttlcache

An in-memory string-interface{} map with various expiration options for golang

Language:GoMIT020