技能 ir-velociraptor
📦

ir-velociraptor

v0.1.0 内容修订 r2 严重 🌐 网络访问⚙️ 外部命令📁 文件系统访问🔑 环境变量⚡ 包含脚本

使用 Velociraptor 调查端点

事件响应人员在主动调查期间需要快速获得端点可见性。此技能为授权的取证工作提供 Velociraptor VQL 模式、收集器指导和狩猎模板。

支持: Claude Codex Code(CC)
⚠️ 38 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "ir-velociraptor" from https://skillstore.io/skills/agentsecops-ir-velociraptor.md and its manifest at https://skillstore.io/api/skills/agentsecops-ir-velociraptor/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/agentsecops-ir-velociraptor.md 已签名 manifest GET /api/skills/agentsecops-ir-velociraptor/manifest 已签名 lockfile GET /api/skills/agentsecops-ir-velociraptor/lockfile

测试它

正在使用“ir-velociraptor”。 请求：为三台疑似受感染的笔记本电脑规划初始收集。

预期结果:

一份有范围限定的收集检查清单，涵盖身份验证日志、进程历史、网络连接、持久化点、时间线数据、证据存储和批准记录。

正在使用“ir-velociraptor”。 请求：狩猎可疑的编码 PowerShell 活动。

预期结果:

一份 VQL 狩猎大纲，包含目标标签、命令行指标、资源限制、分诊优先级、预期误报和审查工作流。

正在使用“ir-velociraptor”。 请求：为高管事件更新总结 Velociraptor 证据。

预期结果:

一份通俗易懂的报告，描述受影响主机、观察到的行为、置信度、待解问题和建议的遏制措施。

安全审计

严重
v9 • 2026/7/23 打开版本化报告

Most static alerts are documentation syntax, placeholders, or read-only defensive queries. Confirmed risks include remote script execution, privileged deployment, broad network exposure, and sensitive temporary files. CI bypasses and insecure deployment examples require correction before publication.

13
已扫描文件
4,899
分析行数
34
复核项
0
已忽略误报

已确认安全问题 (8)

严重
assets/ci-config-template.yml:240
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads a mutable remote script and pipes it directly to Bash. A compromised source can execute arbitrary code on the runner.
高
references/deployment-guide.md:181
Systemd service enablement
sudo systemctl enable velociraptor
The guide enables a persistent Velociraptor service at system startup. This changes host persistence and expands the impact of a compromised binary or configuration.
高
references/deployment-guide.md:315
Systemd service enablement
sudo systemctl enable velociraptor-client
The guide enables a persistent Velociraptor service at system startup. This changes host persistence and expands the impact of a compromised binary or configuration.
高
assets/ci-config-template.yml:54-61assets/ci-config-template.yml:116-128assets/ci-config-template.yml:228-235
Security scan failures are suppressed
The CI template appends success fallbacks to several scanners. Tool failures and some findings can pass without an enforced security gate.
The template visibly uses success fallbacks after Semgrep, Safety, npm audit, and Checkov commands. Several jobs lack a reliable later failure check.
高
references/deployment-guide.md:73-81
Privileged binary installation lacks integrity verification
The deployment guide downloads a Velociraptor executable and moves it into a privileged executable path without verifying a checksum or signature.
The displayed sequence performs wget, chmod, and sudo mv. No integrity verification appears between download and privileged installation.
高
assets/ci-config-template.yml:196-201
Mutable CI action can execute upstream changes
The CI template runs the Trivy action from its mutable master branch. Future upstream changes can execute in repository workflows without review.
The action reference is explicitly aquasecurity/trivy-action@master. A branch is mutable and does not provide immutable supply-chain pinning.
高
references/deployment-guide.md:377-388
NFS evidence store disables root squashing
The NFS example exports the evidence datastore with no_root_squash. A compromised root client can write files as root on the server.
The export option no_root_squash is explicit on line 385. This removes a standard NFS protection for remote root users.
高
SKILL.md:241-248
Malware sample handling lacks isolation controls
The ransomware workflow directs analysts to extract binary samples without specifying quarantine, encrypted packaging, or isolated analysis requirements.
The workflow explicitly requests ransomware binary extraction. The surrounding steps do not state containment controls for handling executable malware samples.
能力复核项 (34)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高
assets/ci-config-template.yml:164
Git platform tokens
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
The workflow passes GITHUB_TOKEN to a third-party action while the workflow has write permissions. A compromised mutable action could misuse repository access.
高
references/deployment-guide.md:278
PowerShell invocation
```powershell
The fenced PowerShell example installs and starts Velociraptor as a persistent Windows service. Following it performs real privileged endpoint modification.
高
references/deployment-guide.md:81
sudo privilege escalation
sudo mv velociraptor-v0.72.3-linux-amd64 /usr/local/bin/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:145
sudo privilege escalation
sudo cat > /etc/systemd/system/velociraptor.service <<'EOF'
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:173
sudo privilege escalation
sudo useradd -r -s /bin/false velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:176
sudo privilege escalation
sudo mkdir -p /etc/velociraptor /var/lib/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:177
sudo privilege escalation
sudo chown -R velociraptor:velociraptor /etc/velociraptor /var/lib/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:180
sudo privilege escalation
sudo systemctl daemon-reload
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:181
sudo privilege escalation
sudo systemctl enable velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:182
sudo privilege escalation
sudo systemctl start velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:215
sudo privilege escalation
sudo apt install certbot
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:218
sudo privilege escalation
sudo certbot certonly --standalone \
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:272
sudo privilege escalation
# Install: sudo dpkg -i velociraptor-client.deb
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:295
sudo privilege escalation
sudo cp velociraptor /usr/local/bin/
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:296
sudo privilege escalation
sudo cp client.config.yaml /etc/velociraptor/
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:299
sudo privilege escalation
sudo cat > /etc/systemd/system/velociraptor-client.service <<'EOF'
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:315
sudo privilege escalation
sudo systemctl enable velociraptor-client
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:316
sudo privilege escalation
sudo systemctl start velociraptor-client
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:380
sudo privilege escalation
sudo apt install nfs-kernel-server
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:381
sudo privilege escalation
sudo mkdir -p /export/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:382
sudo privilege escalation
sudo chown nobody:nogroup /export/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:388
sudo privilege escalation
sudo mount -t nfs nfs-server:/export/velociraptor /var/lib/velociraptor
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:408
sudo privilege escalation
sudo iptables -A INPUT -p tcp --dport 8000 -j ACCEPT
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:411
sudo privilege escalation
sudo iptables -A INPUT -p tcp --dport 8889 -s 10.0.0.0/8 -j ACCEPT
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:412
sudo privilege escalation
sudo iptables -A INPUT -p tcp --dport 8889 -j DROP
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
高
references/deployment-guide.md:415
sudo privilege escalation
sudo iptables-save > /etc/iptables/rules.v4
This deployment instruction uses sudo to change packages, system files, services, mounts, or firewall state. It requires explicit authorization and host-specific review.
中
references/deployment-guide.md:117
Hardcoded IP address
bind_address: 0.0.0.0
The example binds the API to every interface. Without a separate access control, administrative functions may be reachable from unintended networks.
中
references/deployment-guide.md:122
Hardcoded IP address
bind_address: 0.0.0.0
The example binds the management GUI to every interface. This broad exposure increases authentication and web attack surface.
中
references/deployment-guide.md:132
Hardcoded IP address
bind_address: 0.0.0.0
The frontend listens on every interface to accept clients. The deployment must constrain exposure with tested firewall and TLS controls.
中
references/deployment-guide.md:385
Hardcoded IP address
/export/velociraptor 10.0.1.0/24(rw,sync,no_subtree_check,no_root_squash)
The NFS example hardcodes a trusted subnet and combines it with no_root_squash. A compromised client in that range can obtain root-level file access.
中
references/deployment-guide.md:411
Hardcoded IP address
sudo iptables -A INPUT -p tcp --dport 8889 -s 10.0.0.0/8 -j ACCEPT
The firewall example trusts the entire 10.0.0.0/8 range for GUI access. That range may be much broader than the intended management network.
中
references/deployment-guide.md:246
Temp directory access
config client > /tmp/client.config.yaml
The guide writes generated client configuration into a shared temporary directory. Weak permissions or local races could expose or replace sensitive configuration.
低
assets/ci-config-template.yml:240
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The external URL supplies a script that is executed immediately by Bash. Trust in the remote branch and delivery path is security-critical.
低
references/deployment-guide.md:77
Hardcoded URL
wget https://github.com/Velocidex/velociraptor/releases/download/v0.72/velociraptor-v0.72.3-linux-am
The guide downloads an executable for privileged installation without checksum or signature verification. A replaced release artifact could gain root execution.

风险因素

🌐 网络访问 (50)
assets/artifact-template.yaml:126 assets/artifact-template.yaml:127 assets/artifact-template.yaml:132 assets/ci-config-template.yml:240 assets/hunt-template.yaml:138 assets/hunt-template.yaml:138 assets/rule-template.yaml:43 assets/rule-template.yaml:44 assets/rule-template.yaml:45 assets/rule-template.yaml:73 assets/rule-template.yaml:118 assets/rule-template.yaml:119 assets/rule-template.yaml:151 assets/rule-template.yaml:191 assets/rule-template.yaml:192 assets/rule-template.yaml:193 assets/rule-template.yaml:217 assets/rule-template.yaml:260 assets/rule-template.yaml:261 assets/rule-template.yaml:288 references/artifact-development.md:594 references/artifact-development.md:595 references/artifact-development.md:410 references/artifact-development.md:411 references/deployment-guide.md:77 references/deployment-guide.md:110 references/deployment-guide.md:200 references/deployment-guide.md:325 references/deployment-guide.md:117 references/deployment-guide.md:122 references/deployment-guide.md:126 references/deployment-guide.md:127 references/deployment-guide.md:128 references/deployment-guide.md:132 references/deployment-guide.md:357 references/deployment-guide.md:358 references/deployment-guide.md:359 references/deployment-guide.md:370 references/deployment-guide.md:371 references/deployment-guide.md:372 references/deployment-guide.md:385 references/deployment-guide.md:411 references/mitre-attack-mapping.md:419 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:43 SKILL.md:48 SKILL.md:329 SKILL.md:330
⚙️ 外部命令 (50)
assets/ci-config-template.yml:298 assets/ci-config-template.yml:301 assets/ci-config-template.yml:304 assets/ci-config-template.yml:307 assets/ci-config-template.yml:310 assets/ci-config-template.yml:134 assets/ci-config-template.yml:250 assets/ci-config-template.yml:291 assets/hunt-template.yaml:36 assets/hunt-template.yaml:115 assets/hunt-template.yaml:183 references/artifact-development.md:105 references/artifact-development.md:509 references/artifact-development.md:512 references/deployment-guide.md:285-290 references/deployment-guide.md:520 references/deployment-guide.md:278 references/deployment-guide.md:515 references/deployment-guide.md:81 references/deployment-guide.md:145 references/deployment-guide.md:173 references/deployment-guide.md:176 references/deployment-guide.md:177 references/deployment-guide.md:180 references/deployment-guide.md:181 references/deployment-guide.md:182 references/deployment-guide.md:215 references/deployment-guide.md:218 references/deployment-guide.md:272 references/deployment-guide.md:295 references/deployment-guide.md:296 references/deployment-guide.md:299 references/deployment-guide.md:315 references/deployment-guide.md:316 references/deployment-guide.md:380 references/deployment-guide.md:381 references/deployment-guide.md:382 references/deployment-guide.md:388 references/deployment-guide.md:408 references/deployment-guide.md:411 references/deployment-guide.md:412 references/deployment-guide.md:415 references/mitre-attack-mapping.md:59 references/mitre-attack-mapping.md:65 references/mitre-attack-mapping.md:68 references/mitre-attack-mapping.md:69 references/mitre-attack-mapping.md:73 references/mitre-attack-mapping.md:77 references/mitre-attack-mapping.md:165 references/mitre-attack-mapping.md:188
📁 文件系统访问 (3)
assets/ci-config-template.yml:323 assets/ci-config-template.yml:323 references/deployment-guide.md:246
🔑 环境变量 (25)
assets/ci-config-template.yml:164 assets/rule-template.yaml:148 assets/rule-template.yaml:148 assets/rule-template.yaml:147 assets/rule-template.yaml:162 assets/rule-template.yaml:132 assets/rule-template.yaml:147 assets/rule-template.yaml:148 assets/rule-template.yaml:156 assets/rule-template.yaml:157 assets/rule-template.yaml:162 assets/rule-template.yaml:163 assets/rule-template.yaml:164 assets/rule-template.yaml:165 references/deployment-guide.md:231 references/deployment-guide.md:236 references/EXAMPLE.md:423 references/EXAMPLE.md:423 references/EXAMPLE.md:424 references/EXAMPLE.md:425 references/EXAMPLE.md:427 references/EXAMPLE.md:430 references/EXAMPLE.md:432 references/EXAMPLE.md:437 references/EXAMPLE.md:444
⚡ 包含脚本 (2)
references/EXAMPLE.md:138 references/EXAMPLE.md:137

检测到的模式

Pipe to shell patternSystemd service enablement×2
审计者: codex 查看审计历史 →
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/agentsecops-ir-velociraptor/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentsecops-ir-velociraptor/security.svg)](https://skillstore.io/skills/agentsecops-ir-velociraptor?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/agentsecops-ir-velociraptor?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentsecops-ir-velociraptor/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/agentsecops-ir-velociraptor.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

AgentSecOps. (2026). ir-velociraptor security audit report (audit version 9) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/agentsecops-ir-velociraptor/audits/9

BibTeX 引用

@techreport{agentsecops-agentsecops-ir-velociraptor-2026, author = {AgentSecOps}, title = {ir-velociraptor security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/agentsecops-ir-velociraptor/audits/9}, note = {Author version 0.1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "ir-velociraptor security audit report (audit version 9)" version: "0.1.0" type: report authors: - name: "AgentSecOps" date-released: "2026-07-23" url: "https://skillstore.io/skills/agentsecops-ir-velociraptor/audits/9" identifiers: - type: other value: "skillstore:agentsecops-ir-velociraptor:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
59
架构
100
可维护性
87
内容
75
社区
91
规范符合性

你能构建什么

分诊活跃事件

为受影响端点构建有范围限定的 Velociraptor 收集计划，然后审查进程、网络、事件日志和文件时间线证据。

开发威胁狩猎

为可疑 PowerShell、持久化、横向移动、凭证访问指标和异常网络活动创建 VQL 狩猎。

准备取证收集

为已批准的调查设计包含资源限制、监管链记录和证据保护控制的离线收集器。

试试这些提示

规划基础收集 
在发现可疑登录活动后，为一个 Windows 端点创建 Velociraptor 收集计划。包括范围、工件、安全限制和预期输出。
编写聚焦的 VQL 狩猎 
为生产环境 Windows 客户端中的可疑 PowerShell 执行起草 VQL 狩猎。包括参数、分诊字段和误报审查步骤。
构建离线收集器 
为勒索软件调查设计离线 Velociraptor 收集器。将收集限制为已批准的工件，设置资源控制，并包括监管链处理。
将发现映射到 ATT&CK 
审查这些 Velociraptor 发现，并将其映射到 MITRE ATT&CK 战术。区分已确认的证据、假设和建议的后续收集。

最佳实践

  • 仅在已批准的客户端标签上运行狩猎，并在收集前记录调查范围。
  • 尽量减少敏感数据收集，并在传输和存储期间加密证据归档。
  • 在生产端点上大规模运行之前，先在实验室或 notebook 中测试 VQL。

避免

  • 不要在没有资源限制和变更批准的情况下运行广泛的企业级狩猎。
  • 除非案件需要，否则不要收集凭证存储、浏览器数据或注册表配置单元。
  • 不要将 webhook URLs、API keys 或 private keys 粘贴到共享工件或报告中。

常见问题

此技能会自行运行 Velociraptor 吗？
不是。它提供指导和模板。用户仍然需要自己的 Velociraptor 部署、权限和审查流程。
这适合用于生产调查吗？
适合，前提是团队已获授权并具备 Velociraptor 专业知识。生产使用需要范围界定、访问控制、日志记录和资源限制。
它能帮助创建自定义 VQL 工件吗？
可以。它包含针对常见取证收集模式的工件结构指导和示例。
它包含 MITRE ATT&CK 映射吗？
包含。参考材料会将常见 Velociraptor 狩猎映射到 ATT&CK 战术和技术。
这些示例可以收集哪些数据？
示例涵盖进程、网络连接、事件日志、注册表键、文件时间线、服务、浏览器工件以及其他端点证据。
主要安全顾虑是什么？
这些模板可以支持敏感端点收集。它们应仅在已批准的事件响应流程下使用。

开发者详情

许可证

MIT

作者版本

v0.1.0

Skillstore 修订

r2

仓库

https://github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/incident-response/ir-velociraptor

引用

9e952417e76879bc9d853e1b8b2cd6d6d8d4a1c2

维护新鲜度

2026/7/28

使用量

7 次下载 · 565 次浏览

文件结构

📁 assets/

📄 .gitkeep

📄 artifact-template.yaml

📄 ci-config-template.yml

📄 hunt-template.yaml

📄 offline-collector-config.yaml

📄 rule-template.yaml

📁 references/

📄 artifact-development.md

📄 deployment-guide.md

📄 EXAMPLE.md

📄 mitre-attack-mapping.md

📄 vql-patterns.md

📄 WORKFLOW_CHECKLIST.md

📄 SKILL.md

AgentSecOps 的更多技能

查看全部

相关技能

查看全部