Velocidex

    Velocidex/velociraptor

    Digging Deeper....

    backend
    digital-forensics
    endpoint-discovery
    endpoint-protection
    endpoint-security
    forensics-investigations
    Go
    NOASSERTION
    4.4K stars
    676 forks
    4.4K GitHub watchers
    Updated Nov 3, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    3 releases in the last 90 days, the latest 29 days ago, with 135 contributors on GitHub.

    Gained 23% more stars in the last 90 days than in the 90 days before.

    Use Cases & Benefits

    • Collects and analyzes host-based state information using a custom query language for endpoint visibility and forensic investigations.
    • Enables detailed, customizable data collection from endpoints with a powerful query language and extensive artifact library.
    • Use for conducting incident response and forensic investigations on compromised endpoints across diverse operating systems.
    • Use for deploying scalable endpoint security and inventory management solutions in enterprise environments.
    • Use for local triage and data collection on individual machines using a GUI-driven self-contained collector.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Other

    GitHub could not identify this license; read the LICENSE file before depending on it.

    Community files

    • README: present
    • Contributing guide: present

    Watch-outs

    • License not identified by GitHub; read the LICENSE file before depending on it.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries.

    If you want to see what Velociraptor is all about simply:

    This will bring up the GUI, Frontend and a local client. You can collect artifacts from the client (which is just running on your own machine) as normal.

    Once you are ready for a full deployment, check out the various deployment options at https://docs.velociraptor.app/docs/deployment/

    We have our complete training course (7 sessions x 2 hours each) https://docs.velociraptor.app/training/

    The course covers many aspects of Velociraptor in detail.

    Excerpt from the Velocidex/velociraptor README on GitHub (NOASSERTION license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    676+32

    Open issues

    67-9

    Compared with peers in Backend

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    Velocidex/velociraptor compared with Backend repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    anthropics/skills187.8K+2.9K15—
    DuarteSantos8/openGym19.7K+2.4K602 days ago
    shiyu-coder/Kronos47.0K+2.3K16—
    NationalSecurityAgency/ghidra98.2K+2.3K6414 days ago
    microsoft/VibeVoice56.0K+1.1K29—
    Velocidex/velociraptor4.4K—5829 days ago
    Category median56.0K+2.3K29—

    Discover Repositories

    Search across tracked repositories by name or description