Velociraptor is tool that uses Velocidex Query Language (VQL) queries to collect host based state information.
The GUI allows for-
- Collect artifacts interactively from end points.
- Exporting this data for offline analysis.
- Removing or adding monitoring rules from all end points.
- Adding automated response rules on the server.
- Adding new artifacts on the basis of new queries.
This project was created only for educational purpose and not for and unethical use.
Download Link: https://github.com/Velocidex/velociraptor
 queries to collect host based state information. The GUI allows for- ){kind=link}