Skills ir-velociraptor
📦

ir-velociraptor

v0.1.0 Content revision r2 Critical 🌐 Network access⚙️ External commands📁 Filesystem access🔑 Env variables⚡ Contains scripts

Investigate Endpoints with Velociraptor VQL

Endpoint investigations require consistent queries, collection plans, and evidence controls. This skill provides Velociraptor workflows, VQL patterns, and deployment templates for authorized response.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "ir-velociraptor" from https://skillstore.io/skills/agentsecops-ir-velociraptor.md and its manifest at https://skillstore.io/api/skills/agentsecops-ir-velociraptor/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/agentsecops-ir-velociraptor.md Signed manifest GET /api/skills/agentsecops-ir-velociraptor/manifest Signed lockfile GET /api/skills/agentsecops-ir-velociraptor/lockfile

Test it

Using "ir-velociraptor". Plan a hunt for suspicious PowerShell launched by office applications during the last 24 hours.

Expected outcome:

A staged hunt plan covering process ancestry, command-line indicators, PowerShell logs, endpoint labels, time limits, result fields, and false positive review.

Using "ir-velociraptor". Create an offline collection plan for a suspected ransomware incident.

Expected outcome:

A scoped evidence plan covering event logs, timelines, persistence, hashes, resource limits, encrypted storage, chain of custody, and isolated malware handling.

Using "ir-velociraptor". Review a Velociraptor server design that exposes the GUI to a large private network.

Expected outcome:

A risk review recommending a narrow management subnet, strong authentication, TLS, role separation, audit logging, firewall validation, and tested recovery procedures.

Security Audit

Critical
v9 • 7/23/2026 Open versioned report

Most static alerts are documentation syntax, placeholders, or read-only defensive queries. Confirmed risks include remote script execution, privileged deployment, broad network exposure, and sensitive temporary files. CI bypasses and insecure deployment examples require correction before publication.

13
Files scanned
4,899
Lines analyzed
34
Review items
0
False positives ignored

Confirmed security concerns (8)

Critical
assets/ci-config-template.yml:240
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads a mutable remote script and pipes it directly to Bash. A compromised source can execute arbitrary code on the runner.
High
references/deployment-guide.md:181
Systemd service enablement
sudo systemctl enable velociraptor
The guide enables a persistent Velociraptor service at system startup. This changes host persistence and expands the impact of a compromised binary or configuration.
High
references/deployment-guide.md:315
Systemd service enablement
sudo systemctl enable velociraptor-client
The guide enables a persistent Velociraptor service at system startup. This changes host persistence and expands the impact of a compromised binary or configuration.
High
assets/ci-config-template.yml:54-61assets/ci-config-template.yml:116-128assets/ci-config-template.yml:228-235
Security scan failures are suppressed
The CI template appends success fallbacks to several scanners. Tool failures and some findings can pass without an enforced security gate.
The template visibly uses success fallbacks after Semgrep, Safety, npm audit, and Checkov commands. Several jobs lack a reliable later failure check.
High
references/deployment-guide.md:73-81
Privileged binary installation lacks integrity verification
The deployment guide downloads a Velociraptor executable and moves it into a privileged executable path without verifying a checksum or signature.
The displayed sequence performs wget, chmod, and sudo mv. No integrity verification appears between download and privileged installation.
High
assets/ci-config-template.yml:196-201
Mutable CI action can execute upstream changes
The CI template runs the Trivy action from its mutable master branch. Future upstream changes can execute in repository workflows without review.
The action reference is explicitly aquasecurity/trivy-action@master. A branch is mutable and does not provide immutable supply-chain pinning.
High
references/deployment-guide.md:377-388
NFS evidence store disables root squashing
The NFS example exports the evidence datastore with no_root_squash. A compromised root client can write files as root on the server.
The export option no_root_squash is explicit on line 385. This removes a standard NFS protection for remote root users.
High
SKILL.md:241-248
Malware sample handling lacks isolation controls
The ransomware workflow directs analysts to extract binary samples without specifying quarantine, encrypted packaging, or isolated analysis requirements.
The workflow explicitly requests ransomware binary extraction. The surrounding steps do not state containment controls for handling executable malware samples.
Capability review items (34)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
assets/ci-config-template.yml:164
Git platform tokens
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
The workflow passes GITHUB_TOKEN to a third-party action while the workflow has write permissions. A compromised mutable action could misuse repository access.
High
references/deployment-guide.md:278
PowerShell invocation
```powershell
The fenced PowerShell example installs and starts Velociraptor as a persistent Windows service. Following it performs real privileged endpoint modification.
High
references/deployment-guide.md:81
sudo privilege escalation
sudo mv velociraptor-v0.72.3-linux-amd64 /usr/local/bin/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:145
sudo privilege escalation
sudo cat > /etc/systemd/system/velociraptor.service <<'EOF'
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:173
sudo privilege escalation
sudo useradd -r -s /bin/false velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:176
sudo privilege escalation
sudo mkdir -p /etc/velociraptor /var/lib/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:177
sudo privilege escalation
sudo chown -R velociraptor:velociraptor /etc/velociraptor /var/lib/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:180
sudo privilege escalation
sudo systemctl daemon-reload
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:181
sudo privilege escalation
sudo systemctl enable velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:182
sudo privilege escalation
sudo systemctl start velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:215
sudo privilege escalation
sudo apt install certbot
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:218
sudo privilege escalation
sudo certbot certonly --standalone \
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:272
sudo privilege escalation
# Install: sudo dpkg -i velociraptor-client.deb
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:295
sudo privilege escalation
sudo cp velociraptor /usr/local/bin/
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:296
sudo privilege escalation
sudo cp client.config.yaml /etc/velociraptor/
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:299
sudo privilege escalation
sudo cat > /etc/systemd/system/velociraptor-client.service <<'EOF'
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:315
sudo privilege escalation
sudo systemctl enable velociraptor-client
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:316
sudo privilege escalation
sudo systemctl start velociraptor-client
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:380
sudo privilege escalation
sudo apt install nfs-kernel-server
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:381
sudo privilege escalation
sudo mkdir -p /export/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:382
sudo privilege escalation
sudo chown nobody:nogroup /export/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:388
sudo privilege escalation
sudo mount -t nfs nfs-server:/export/velociraptor /var/lib/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:408
sudo privilege escalation
sudo iptables -A INPUT -p tcp --dport 8000 -j ACCEPT
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:411
sudo privilege escalation
sudo iptables -A INPUT -p tcp --dport 8889 -s 10.0.0.0/8 -j ACCEPT
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:412
sudo privilege escalation
sudo iptables -A INPUT -p tcp --dport 8889 -j DROP
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
High
references/deployment-guide.md:415
sudo privilege escalation
sudo iptables-save > /etc/iptables/rules.v4
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
Medium
references/deployment-guide.md:117
Hardcoded IP address
bind_address: 0.0.0.0
The example binds the API to every interface. Without a separate access control, administrative functions may be reachable from unintended networks.
Medium
references/deployment-guide.md:122
Hardcoded IP address
bind_address: 0.0.0.0
The example binds the management GUI to every interface. This broad exposure increases authentication and web attack surface.
Medium
references/deployment-guide.md:132
Hardcoded IP address
bind_address: 0.0.0.0
The frontend listens on every interface to accept clients. The deployment must constrain exposure with tested firewall and TLS controls.
Medium
references/deployment-guide.md:385
Hardcoded IP address
/export/velociraptor 10.0.1.0/24(rw,sync,no_subtree_check,no_root_squash)
The NFS example hardcodes a trusted subnet and combines it with no_root_squash. A compromised client in that range can obtain root-level file access.
Medium
references/deployment-guide.md:411
Hardcoded IP address
sudo iptables -A INPUT -p tcp --dport 8889 -s 10.0.0.0/8 -j ACCEPT
The firewall example trusts the entire 10.0.0.0/8 range for GUI access. That range may be much broader than the intended management network.
Medium
references/deployment-guide.md:246
Temp directory access
config client > /tmp/client.config.yaml
The guide writes generated client configuration into a shared temporary directory. Weak permissions or local races could expose or replace sensitive configuration.
Low
assets/ci-config-template.yml:240
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The external URL supplies a script that is executed immediately by Bash. Trust in the remote branch and delivery path is security-critical.
Low
references/deployment-guide.md:77
Hardcoded URL
wget https://github.com/Velocidex/velociraptor/releases/download/v0.72/velociraptor-v0.72.3-linux-am
The guide downloads an executable for privileged installation without checksum or signature verification. A replaced release artifact could gain root execution.

Risk Factors

🌐 Network access (50)
assets/artifact-template.yaml:126 assets/artifact-template.yaml:127 assets/artifact-template.yaml:132 assets/ci-config-template.yml:240 assets/hunt-template.yaml:138 assets/hunt-template.yaml:138 assets/rule-template.yaml:43 assets/rule-template.yaml:44 assets/rule-template.yaml:45 assets/rule-template.yaml:73 assets/rule-template.yaml:118 assets/rule-template.yaml:119 assets/rule-template.yaml:151 assets/rule-template.yaml:191 assets/rule-template.yaml:192 assets/rule-template.yaml:193 assets/rule-template.yaml:217 assets/rule-template.yaml:260 assets/rule-template.yaml:261 assets/rule-template.yaml:288 references/artifact-development.md:594 references/artifact-development.md:595 references/artifact-development.md:410 references/artifact-development.md:411 references/deployment-guide.md:77 references/deployment-guide.md:110 references/deployment-guide.md:200 references/deployment-guide.md:325 references/deployment-guide.md:117 references/deployment-guide.md:122 references/deployment-guide.md:126 references/deployment-guide.md:127 references/deployment-guide.md:128 references/deployment-guide.md:132 references/deployment-guide.md:357 references/deployment-guide.md:358 references/deployment-guide.md:359 references/deployment-guide.md:370 references/deployment-guide.md:371 references/deployment-guide.md:372 references/deployment-guide.md:385 references/deployment-guide.md:411 references/mitre-attack-mapping.md:419 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:43 SKILL.md:48 SKILL.md:329 SKILL.md:330
⚙️ External commands (50)
assets/ci-config-template.yml:298 assets/ci-config-template.yml:301 assets/ci-config-template.yml:304 assets/ci-config-template.yml:307 assets/ci-config-template.yml:310 assets/ci-config-template.yml:134 assets/ci-config-template.yml:250 assets/ci-config-template.yml:291 assets/hunt-template.yaml:36 assets/hunt-template.yaml:115 assets/hunt-template.yaml:183 references/artifact-development.md:105 references/artifact-development.md:509 references/artifact-development.md:512 references/deployment-guide.md:285-290 references/deployment-guide.md:520 references/deployment-guide.md:278 references/deployment-guide.md:515 references/deployment-guide.md:81 references/deployment-guide.md:145 references/deployment-guide.md:173 references/deployment-guide.md:176 references/deployment-guide.md:177 references/deployment-guide.md:180 references/deployment-guide.md:181 references/deployment-guide.md:182 references/deployment-guide.md:215 references/deployment-guide.md:218 references/deployment-guide.md:272 references/deployment-guide.md:295 references/deployment-guide.md:296 references/deployment-guide.md:299 references/deployment-guide.md:315 references/deployment-guide.md:316 references/deployment-guide.md:380 references/deployment-guide.md:381 references/deployment-guide.md:382 references/deployment-guide.md:388 references/deployment-guide.md:408 references/deployment-guide.md:411 references/deployment-guide.md:412 references/deployment-guide.md:415 references/mitre-attack-mapping.md:59 references/mitre-attack-mapping.md:65 references/mitre-attack-mapping.md:68 references/mitre-attack-mapping.md:69 references/mitre-attack-mapping.md:73 references/mitre-attack-mapping.md:77 references/mitre-attack-mapping.md:165 references/mitre-attack-mapping.md:188
📁 Filesystem access (3)
assets/ci-config-template.yml:323 assets/ci-config-template.yml:323 references/deployment-guide.md:246
🔑 Env variables (25)
assets/ci-config-template.yml:164 assets/rule-template.yaml:148 assets/rule-template.yaml:148 assets/rule-template.yaml:147 assets/rule-template.yaml:162 assets/rule-template.yaml:132 assets/rule-template.yaml:147 assets/rule-template.yaml:148 assets/rule-template.yaml:156 assets/rule-template.yaml:157 assets/rule-template.yaml:162 assets/rule-template.yaml:163 assets/rule-template.yaml:164 assets/rule-template.yaml:165 references/deployment-guide.md:231 references/deployment-guide.md:236 references/EXAMPLE.md:423 references/EXAMPLE.md:423 references/EXAMPLE.md:424 references/EXAMPLE.md:425 references/EXAMPLE.md:427 references/EXAMPLE.md:430 references/EXAMPLE.md:432 references/EXAMPLE.md:437 references/EXAMPLE.md:444
⚡ Contains scripts (2)
references/EXAMPLE.md:138 references/EXAMPLE.md:137

Detected Patterns

Pipe to shell patternSystemd service enablement×2
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/agentsecops-ir-velociraptor/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentsecops-ir-velociraptor/security.svg)](https://skillstore.io/skills/agentsecops-ir-velociraptor?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/agentsecops-ir-velociraptor?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentsecops-ir-velociraptor/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/agentsecops-ir-velociraptor.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

AgentSecOps. (2026). ir-velociraptor security audit report (audit version 9) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/agentsecops-ir-velociraptor/audits/9

BibTeX citation

@techreport{agentsecops-agentsecops-ir-velociraptor-2026, author = {AgentSecOps}, title = {ir-velociraptor security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/agentsecops-ir-velociraptor/audits/9}, note = {Author version 0.1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "ir-velociraptor security audit report (audit version 9)" version: "0.1.0" type: report authors: - name: "AgentSecOps" date-released: "2026-07-23" url: "https://skillstore.io/skills/agentsecops-ir-velociraptor/audits/9" identifiers: - type: other value: "skillstore:agentsecops-ir-velociraptor:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
59
Architecture
100
Maintainability
87
Content
75
Community
91
Spec Compliance

What You Can Build

Triage a compromised endpoint

Build a focused collection plan for processes, logons, network connections, persistence, and recent file changes.

Design an enterprise threat hunt

Create a staged hunt with endpoint labels, VQL artifacts, resource limits, positive indicators, and triage priorities.

Develop a forensic artifact

Define parameters, preconditions, data sources, expected output, tests, and MITRE ATT&CK mappings for a custom artifact.

Try These Prompts

Plan a basic endpoint triage 
Create a Velociraptor triage plan for [incident type] on [operating system]. Include evidence priorities, artifact names, scope controls, and validation steps.
Draft a focused VQL hunt 
Draft a read-only VQL hunt for [indicator or behavior]. Explain each data source, filter, expected field, false positive, and resource limit.
Design a custom artifact 
Design a Velociraptor artifact for [forensic objective]. Include typed parameters, preconditions, bounded queries, output fields, test cases, and privacy controls.
Review an enterprise deployment 
Review this Velociraptor deployment design: [details]. Identify trust boundaries, privileged operations, certificate handling, network exposure, storage risks, and safer configuration changes.

Best Practices

  • Obtain written authorization and define endpoint, user, data, and time boundaries before collection.
  • Start with read-only queries, small endpoint groups, strict resource limits, and documented validation.
  • Encrypt evidence, restrict access, record hashes, and preserve a complete chain of custody.

Avoid

  • Do not run broad hunts across production without staged testing and endpoint impact limits.
  • Do not collect credentials, browser data, or personal files without explicit necessity and approval.
  • Do not copy deployment commands before verifying binaries, network ranges, permissions, and service configuration.

Frequently Asked Questions

Does this skill execute Velociraptor queries?
No. It provides guidance and templates. Execution requires a separate Velociraptor installation, credentials, permissions, and user approval.
Which operating systems are covered?
Most detailed examples target Windows. The deployment guide also includes Linux server and client examples.
Can I use the templates without changes?
No. Replace placeholders, confirm artifact names, validate syntax, and review every privileged or network-facing setting.
Does it support MITRE ATT&CK mapping?
Yes. The references connect common endpoint evidence and detection queries to ATT&CK tactics and techniques.
How should sensitive evidence be handled?
Minimize collection, encrypt transport and storage, restrict access, document custody, and follow legal and organizational requirements.
Is the deployment guidance production ready?
No. Production use requires checksum verification, pinned dependencies, narrow network access, protected keys, hardened storage, monitoring, and recovery testing.

Developer Details

License

MIT

Author version

v0.1.0

Skillstore revision

r2

Repository

https://github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/incident-response/ir-velociraptor

Ref

9e952417e76879bc9d853e1b8b2cd6d6d8d4a1c2

Maintenance freshness

7/24/2026

Usage

7 downloads · 565 views

File structure

📁 assets/

📄 .gitkeep

📄 artifact-template.yaml

📄 ci-config-template.yml

📄 hunt-template.yaml

📄 offline-collector-config.yaml

📄 rule-template.yaml

📁 references/

📄 artifact-development.md

📄 deployment-guide.md

📄 EXAMPLE.md

📄 mitre-attack-mapping.md

📄 vql-patterns.md

📄 WORKFLOW_CHECKLIST.md

📄 SKILL.md

More from AgentSecOps

View all

Related Skills

View all