Velociraptor Remote Access Tool Execution

Georg Lauenstein@gsec

•updated Mar 16, 2026•1•0•71

Detects execution of Velociraptor which may indicate threat actor using legitimate EDR tool for malicious C2