FREE INCIDENT RESPONSE PLATFORM - Velociraptor Install

Join me as we install your own Incident Response platform, Velociraptor. Remotely investigate and quarantine your endpoints. Protect your endpoints! Let's deploy a Host Intrusion Detection System and SIEM with free open source tools. Join me as we explore and learn together.

[jannis]

Still a very valid and great video, one issue you are going to run into (speaking from experience) is that with deploying this in a DFIR scenario some firewalls don't support FQDN allowlisting, same with CrowdStrike when you contain a host you are only able to add IPs to the containment policy 🙃

[mntas]

Amazing video Taylor!!!! 😃👌🏼 Keep making this kind of content! 💪🏼

[tolerit]

Great video. This really helped me out. Thanks alot !!!

[jameslucas]

Great video. I just wanted to point out that you (correctly) stated that Letsencrypt certs expire after 3 months but not that they they use an ACME client program to automate renewal of the cert so generally I think they are a better choice than self -signed certs. Top tip - you can secure services on your local network without exposing your service to the web by using the ACME DNS01 challenge to request the cert. You will need to be using an external DNS provider with a supported DNS API (which includes most of the big players.

[GregoryBaskincom]

Great video! Straight forward and to the point. Much clearer than the original documentation. Only challenge I'm having at the moment is using the Public Facing IP address of the EC2 instance pointed to my subdomain, however I'm waiting on the DNS to propagate. Made the Ubuntu server run apache2, not sure if that was needed

[arunrmyt]

Amazing man. This is need of the hour. But extende more steps with own ssl certificate

[---trqg]

Is it logically justified to use wazuh and velociraptor together? Or it is not best practice approach?

[robinsondurai]

Its is recommended to you install Velociraptor server in same Wazuh server ..?

[aussiejordanboy]

Great video indeed! Everything went fine except when I created the custom installer using the custom.config file. The agent is not showing on the Velociraptor manager portal.! what I'm doing wrong

[AlexHera]

What is the terminal app thay you're using?

[wkfiutl]

I Have no clients. Microsoft took PC control for explore it to his BENEFIT.

[wkfiutl]

In addition, he contaminate my PC. So i hate this Satanic Microsoft.