DEATHcon Velociraptor workshop was held November 2023. I covered practical break down of Velociraptor and VQL, incorporated into real world scenarios.

1. Brief introduction to Velociraptor and lab setup
2. Available data / VQL accessors
3. VQL Performance and Yara.
4. ATT&CK Detection use case: RDP patching
5. UEFI BlackLotus
6. LNK Analysis