Skip to content
Please update to the latest release 0.77.2 to address Multiple CVEs.

Windows

The Registry Hunter

11 April 2024

Carving $USN journal entries

16 June 2021

Verifying executables on Windows

9 June 2021

Digging into process memory

16 April 2021

Digging for files with Velociraptor

13 February 2021

Detecting DLL Hijacking With VQL

2 February 2021

Disabled Event Log files

29 January 2021

The Windows USN Journal

12 November 2020

HashRunKeys

Windows.Registry.CapabilityAccessManager