velociraptor-discuss

1–30 of 234

This is a mailing list to discuss the Velociraptor Forensic Suite. You can find the code on https://gitlab.com/velocidex/velociraptor

Our website can be reached at https://docs.velociraptor.app

0 selected

Jakub A, Mike Cohen2

Jun 3

OIDC configuration

It is not enough to have OIDC configured - you also need to add the user to the Velociraptor system

unread,

OIDC configuration

It is not enough to have OIDC configured - you also need to add the user to the Velociraptor system

Jun 3

Tiffany Estupiñan, Mike Cohen2

Apr 20

Support on RedHat6.4

you will need to use the "centos" build on the releases page as it was built for a very old

unread,

Support on RedHat6.4

you will need to use the "centos" build on the releases page as it was built for a very old

Apr 20

Harold Thurnstein

Feb 25

Issues running queries from the command line

Hi, Is anyone having a problem querying clients() from the command line for velociraptor 6.3? I'

unread,

Issues running queries from the command line

Hi, Is anyone having a problem querying clients() from the command line for velociraptor 6.3? I'

Feb 25

Mario DeTore, Mike Cohen4

Feb 17

Multi-frontend/minion questions

Thanks Mike, I was able to partially resolve some of this (my node naming convention was off - didn

unread,

Multi-frontend/minion questions

Thanks Mike, I was able to partially resolve some of this (my node naming convention was off - didn

Feb 17

Fusao Tanida, Mike Cohen3

Feb 16

Formatting timestamp string in VQL

Hi Mike Thank you for detailed explanation. I fully resolved my question. As you said, MarshalText is

unread,

Formatting timestamp string in VQL

Hi Mike Thank you for detailed explanation. I fully resolved my question. As you said, MarshalText is

Feb 16

martinl...@gmail.com, Mike Cohen3

Feb 8

API port getting reset to 127.0.0.1 in server.config.yaml

OK, that make sense. I'm not sure what is changing it, I'll do some poking around. Thanks for

unread,

API port getting reset to 127.0.0.1 in server.config.yaml

OK, that make sense. I'm not sure what is changing it, I'll do some poking around. Thanks for

Feb 8

Orcun Tagtekin, Mike Cohen2

Feb 1

Hi Orcun, Let me reply to you off the list :-) Thanks Mike Mike Cohen Digital Paleontologist,

unread,

Hi Orcun, Let me reply to you off the list :-) Thanks Mike Mike Cohen Digital Paleontologist,

Feb 1

Jan 30

Let's Encrypt revocations

Hi Velociraptor users, We received reports this morning that some users are experiencing Let's

unread,

Let's Encrypt revocations

Hi Velociraptor users, We received reports this morning that some users are experiencing Let's

Jan 30

Orcun Tagtekin, Mike Cohen5

Jan 21

Server Maintenance Tips

Hi Orcun, Lot of folks were interested in your question and I think this is a very important topic -

unread,

Server Maintenance Tips

Hi Orcun, Lot of folks were interested in your question and I think this is a very important topic -

Jan 21

Fusao Tanida, Mike Cohen3

Jan 13

handling CSV parameter in VQL

Hi Mike. Thank you for detailed explanation with internal behaviors. My question was completely

unread,

handling CSV parameter in VQL

Hi Mike. Thank you for detailed explanation with internal behaviors. My question was completely

Jan 13

martinl...@gmail.com, Mike Cohen3

12/19/21

Query that no longer works

It seems I was wrong - the file_store() function does in fact sanitize the path properly and also

unread,

Query that no longer works

It seems I was wrong - the file_store() function does in fact sanitize the path properly and also

12/19/21

Orcun Tagtekin, Mike Cohen2

12/16/21

Duplicate client-ids on Golden Images

This was discussed here https://github.com/Velocidex/velociraptor/issues/1143 with a proposed

unread,

Duplicate client-ids on Golden Images

This was discussed here https://github.com/Velocidex/velociraptor/issues/1143 with a proposed

12/16/21

Orcun Tagtekin, Mike Cohen8

12/16/21

Github action binary still reports glibc issues on older Rhel and Centos

Thank you. On Tuesday, December 7, 2021 at 8:38:18 AM UTC-5 mi...@velocidex.com wrote: Just to let

unread,

Github action binary still reports glibc issues on older Rhel and Centos

Thank you. On Tuesday, December 7, 2021 at 8:38:18 AM UTC-5 mi...@velocidex.com wrote: Just to let

12/16/21

martinl...@gmail.com, Michael Cohen7

11/11/21

Error when using collect_client

I discovered that the VM had originally been used as a Velo server and is used as a client. So I

unread,

Error when using collect_client

I discovered that the VM had originally been used as a Velo server and is used as a client. So I

11/11/21

learning account, Mike Cohen2

10/26/21

How to automatic Extract File from Velociraptor to excel using Python

You can just use the python API to run any queries from python and get the json to do whatever you

unread,

How to automatic Extract File from Velociraptor to excel using Python

You can just use the python API to run any queries from python and get the json to do whatever you

10/26/21

Mario DeTore, Mike Cohen3

10/22/21

Easiest way to map fields in a single row to a dict?

Thanks Mike, your response got me pointed in the right direction. Here's what I came up with that

unread,

Easiest way to map fields in a single row to a dict?

Thanks Mike, your response got me pointed in the right direction. Here's what I came up with that

10/22/21

learning account, Mike Cohen2

10/21/21

When you run the query in a notebook you are actually running it on the server (which is probably

unread,

When you run the query in a notebook you are actually running it on the server (which is probably

10/21/21

Jan Jacobs, Mike Cohen3

9/29/21

Uploading all results from a specific result

Thanks Mike, as always :-) We have that clock running to automaticly schedule the check artifact each

unread,

Uploading all results from a specific result

Thanks Mike, as always :-) We have that clock running to automaticly schedule the check artifact each

9/29/21

Navaneetha sankar, … Eric Capuano5

9/21/21

Integration with Timesketch

Not sure if this helps, but Whitney and I did a talk at DFIR summit about this. https://www.youtube.

unread,

Integration with Timesketch

Not sure if this helps, but Whitney and I did a talk at DFIR summit about this. https://www.youtube.

9/21/21

Trevor Hubbard, … Michael Cohen4

9/21/21

server 2003 install error [not a valid win32 application]

thank you for the prompt response On Tuesday, September 21, 2021 at 2:05:15 PM UTC-7 mike_cohen wrote

unread,

server 2003 install error [not a valid win32 application]

thank you for the prompt response On Tuesday, September 21, 2021 at 2:05:15 PM UTC-7 mike_cohen wrote

9/21/21

9/20/21

Velociraptor Contributor Contest - Deadline is Monday

There's still time to submit your entry to the Velociraptor Contributor Contest. We'll be

unread,

Velociraptor Contributor Contest - Deadline is Monday

There's still time to submit your entry to the Velociraptor Contributor Contest. We'll be

9/20/21

learning account, Mike Cohen2

9/14/21

cannot showing windows app edge history

Is there any clues in the query log? On Monday, September 6, 2021 at 6:03:36 PM UTC+10 learning...@

unread,

cannot showing windows app edge history

Is there any clues in the query log? On Monday, September 6, 2021 at 6:03:36 PM UTC+10 learning...@

9/14/21

desmond ozurumba, Mike Cohen7

8/16/21

A red icon indicates that the host has not been seen for 24 hours

It looks like your clients are not properly installed - how have you deployed them? They need to

unread,

A red icon indicates that the host has not been seen for 24 hours

It looks like your clients are not properly installed - how have you deployed them? They need to

8/16/21

8/3/21

unable to add FQDN to script

My apologies! The above script works correct, what i failed to do was unload the artifact from the

unread,

unable to add FQDN to script

My apologies! The above script works correct, what i failed to do was unload the artifact from the

8/3/21

mariano kabakian2

7/27/21

cannot enrroll my client

Forget the qst. Was a firewall issue! Thanks anyway El martes, 27 de julio de 2021 a las 19:01:29 UTC

unread,

cannot enrroll my client

Forget the qst. Was a firewall issue! Thanks anyway El martes, 27 de julio de 2021 a las 19:01:29 UTC

7/27/21

Axel Andriot, Mike Cohen5

7/23/21

Problem with the CN of my own certificate (Wildcard Certificate)

Hello Mike, Thanks a lot for your help ! Everything works as i wanted, so i just did "

unread,

Problem with the CN of my own certificate (Wildcard Certificate)

Hello Mike, Thanks a lot for your help ! Everything works as i wanted, so i just did "

7/23/21

martinl...@gmail.com, Mike Cohen2

7/14/21

Problem getting flows using API

As you can see the artifacts_with_results contain two artifacts: artifacts_with_results': ['

unread,

Problem getting flows using API

As you can see the artifacts_with_results contain two artifacts: artifacts_with_results': ['

7/14/21

ali, Mike Cohen2

6/12/21

Velociraptor uses the write back file located in the config file to store it's private key and

unread,

Velociraptor uses the write back file located in the config file to store it's private key and

6/12/21

Trevor Hubbard, Mike Cohen3

6/7/21

server/client config generate from corporate-provided certificate ?

Got it working, thanks for the help. We decided to not go with our own GoDaddy-provided cert, as the

unread,

server/client config generate from corporate-provided certificate ?

Got it working, thanks for the help. We decided to not go with our own GoDaddy-provided cert, as the

6/7/21

Trevor Hubbard, Mike Cohen3

6/1/21

Server 2019 x64 - not showing in client list

that worked, thank you On Friday, May 28, 2021 at 6:05:52 PM UTC-4 Mike Cohen wrote: Can you search

unread,

Server 2019 x64 - not showing in client list

that worked, thank you On Friday, May 28, 2021 at 6:05:52 PM UTC-4 Mike Cohen wrote: Can you search

6/1/21

Search

Clear search

Close search

Google apps

Main menu