f0r3ns1cat0r/velociraptor

Velociraptor is an endpoint visibility and collection tool that uses The Velociraptor Query Language (VQL) to gather host-based state information. It's designed for digital forensics and incident response professionals who need to collect and analyze data from endpoints across Windows, Linux, and macOS systems.