vql

Blue Team Village·18 min

• DEF CON
• Blue Team
• Date: Aug 2022
• Location: Las Vegas

Project Obsidian

Project Obsidian demonstrates writing custom Velociraptor Query Language (VQL) artifacts to hunt for IOCs and collect forensic evidence across thousands of endpoints.

Blue Team Village·35 min

• DEF CON
• Blue Team
• Date: Aug 2021
• Location: Las Vegas

Mike Cohen

Velociraptor creator Mike Cohen demonstrates advanced enterprise endpoint forensics and live incident triage using Velociraptor Query Language (VQL).