DFIR platformOpen SourceFeatured

Velociraptor

Endpoint visibility and DFIR collection.

Open-source endpoint monitoring, collection, and digital forensics platform for investigations and hunts.

Detection EngineeringOpen SourceOfficial site listedCommunity voting
Visit site

Overview

What Velociraptor is good for

Open-source endpoint monitoring, collection, and digital forensics platform for investigations and hunts.

Built for detection engineering and threat intelligence workflows.

Useful when evaluating dfir platform capabilities.

Helpful for dfir, endpoint, hunting investigations and triage.

Evaluation guide

Quick decision notes

Best fit

Detection engineers building, testing, translating, or mapping rules across SOC workflows.

Check before using

Confirm current pricing, data limits, account requirements, and licensing on the official site before production use.

Typical inputs

#dfir · #endpoint · #hunting

Discovery path

Use the categories, source links, and similar tools below to compare it with nearby options.

Use cases

Where it fits

Detection engineers building, testing, translating, or mapping rules across SOC workflows.
Threat intelligence analysts enriching indicators, checking reputation, and pivoting from weak signals into stronger context.

Classification

Categories and tags

Detection EngineeringThreat Intelligence#dfir#endpoint#hunting

Sources

Official links and checks

Use these links to verify current plans, access requirements, documentation, releases, and support status.

Reviews

Community reviews and comments

Community reviews

Comment provider is not configured yet. This placeholder keeps the review area visible while setup is completed.

Suggest a review

FAQ

Questions about Velociraptor

What is Velociraptor used for?

Velociraptor is used for dfir platform workflows. Open-source endpoint monitoring, collection, and digital forensics platform for investigations and hunts.

Is Velociraptor free?

The listed pricing model is Open Source. Check the official site for exact plan limits, usage restrictions, and current commercial terms.

Which teams should evaluate Velociraptor?

It is most relevant to teams working across detection engineering, threat intelligence workflows.

What are alternatives to Velociraptor?

Start with the similar tools section on this page. It highlights tools with overlapping categories, tags, and operational use cases.