velociraptor-docker/README.md

velociraptor-docker

Run Velocidex Velociraptor server with Docker

Install

• Ensure docker-compose is installed on the host
• git clone https://github.com/weslambert/velociraptor-docker
• cd velociraptor-docker
• docker-compose up
• Access the Velociraptor GUI via https://<hostip>:8889
  • Default u/p is admin/admin
  • This can be changed by running: docker exec -it velox ./velociraptor --config server.config.yaml user add user1 user1 --role administrator

Notes:

Linux, Mac, and Windows binaries are located in /velociraptor/clients, which should be mapped to the host in the ./velociraptor directory if using docker-compose

Once started, edit server.config.yaml in /velociraptor, then run docker-compose down/up for the server to reflect the changes

Docker image

To pull only the Docker image:

docker pull wlambert/velociraptor