Skip to content

Please update to the latest release 0.77.2 to address Multiple CVEs.

Docs Blog Downloads VQL Reference Config Reference

CTRL K

CTRL K

Documentation
VQL Reference
- Frequently Used
- Windows
- Linux
- Server
- Parsers
- Encode/Decode
- Event Plugins
- Experimental
- Developer
- Other
- Accessors
Artifact Exchange
Artifact Reference
Knowledge Base
Training
- Playbooks
- Comparisons
  - EZ Tools
  - RawCopy
Presentations
RSS
Mailing List
Discord
YouTube
Rapid7 Docs
Search

Documentation
VQL Reference
- Frequently Used
- Windows
- Linux
- Server
- Parsers
- Encode/Decode
- Event Plugins
- Experimental
- Developer
- Other
- Accessors
Artifact Exchange
Artifact Reference
Knowledge Base
Training
- Playbooks
- Comparisons
  - EZ Tools
  - RawCopy
Presentations
RSS
Mailing List
Discord
YouTube
Rapid7 Docs
Search

Brought to you by Rapid7 logo

© 2026

Edit this page on GitHub →

Documentation

Troubleshooting

Debugging

Global

VQL

Plugins

Zip

Zip

Windows Event Log Watcher Process Tracker