There are currently no official training courses scheduled.
The courses below are run by third parties, not by the Velociraptor project.
Digital Defense Institute. Two days, offered live at conferences and on-demand.
Covers Velociraptor end to end: deploying a server, rolling agents out across a fleet, and writing VQL artifacts, then applying those skills to a full intrusion. Topics include hunts, notebooks and stacking analysis at scale, Sigma over event logs, scoping a compromise, proving execution with Prefetch and ShimCache, extracting C2 beacon configuration from memory, and coordinated fleet-wide eradication. Includes 16 hands-on labs on cloud-hosted lab VMs, each with a video walkthrough. Taught by Eric Capuano and Whitney Champion.
Click here to view in a new tab.
The full video playlist is available here on YouTube.
Please note that these videos are not up to date with the latest version. The slide deck above is more recent and contains additional sections which don’t have corresponding videos.