Velociraptor Training

VQL Fundamentals Pt 1.

This module covers the basics of the Velociraptor Query Language.

VQL Fundamentals Pt 2.

Continue our journey of VQL.

Forensic Analysis Pt 1.

Armed with our understanding of VQL, we continue to apply it to perform initial triage.

Forensic Analysis Pt 2.

Moving on to more complex forensic analysis techniques. We examine the Windows Event logs, and ETW.

Offline collection and hunting.

This module covers the use case of offline collection - deploying a pre-configured autonomous collector that fetches the required data easily.

Extending VQL and the Velociraptor API.

In this module we show how to extend VQL using powershell or external tools. We also cover the Velociraptor API and server side automation.