velociraptor

github:refractionPOINT/lc-ai · first committed 2025-12-21 · source · badge

Velociraptor DFIR integration for LimaCharlie. List available VQL artifacts, view artifact definitions, launch forensic collections on endpoints. Find raw collection data in Artifacts (type:velociraptor, source:SID). Query processed JSON events from the 'velociraptor' sensor (tag:ext:ext-velociraptor). Build D&R rules for velociraptor_collection events. Use for: forensic triage, incident response,

Skill Health: not yet scored

Listed, not yet scored. This skill has no public model test yet. It is in the scoring queue; submitted skills go first, then the most-installed.

Version history

5 commits to this file on GitHub (newest first).

2026-02-27 · commit 9fd2442 · Migrate lc-essentials from MCP server to limacharlie CLI (v2.0.0) (#34)
2026-01-14 · commit 3631ad1 · feat: upgrade limacharlie-api-executor from haiku to sonnet model (#18)
2026-01-04 · commit d90b363 · Add onboard-new-org skill for complete organization onboarding (#9)
2026-01-01 · commit 6e9112b · Clarify EDR vs USP architecture constraints for sensor tasking (#8)
2025-12-21 · commit c1eb571 · Add .claude configuration with onboarding hook (#1)

Archived snapshots