add-velociraptor-mapped-client

What problem does it solve?

This Skill simplifies the process of attaching an offline Windows evidence image or mounted directory to a Velociraptor GUI workspace for forensic analysis.

Core Features & Use Cases

• Evidence Integration: Automatically remap and connect dead-disk images or directories to Velociraptor for review.
• Workflow Automation: Generates remapping files, validates configurations, and manages client supervision commands to ensure consistent access to evidence.
• Use Case: For incident responders handling forensic images, quickly set up Velociraptor clients to interrogate evidence without manual configuration.

Quick Start

Run the script with the path to your evidence image or mounted directory to automatically attach and start the Velociraptor client session.