darkblack47/velociraptor

Velociraptor is an endpoint visibility and collection tool that uses the Velociraptor Query Language (VQL) to gather host-based state information. It's designed for digital forensics and incident response professionals who need to collect and analyze data from endpoints across Windows, Linux, and macOS platforms.