Objective

This lab is a guided walk-through for running Velociraptor in GUI mode.

GUI mode will be used throughout the workshop.

We also walk through importing additional content into Velociraptor.

The Velociraptor GUI is configured to open automatically upon boot, but the credentials are available below:

• URL: https://127.0.0.1:8889/
• Username: admin
• Password: password

Dependencies

Windows 10+ VM with administrator level access.

• UEFI enabled for UEFI use cases (detail later)

Internet access if you would like to do content import.

Tasks

Download and run Velociraptor in GUI mode

Import additional content