Compare software

Velociraptor vs Sysmon: catalog facts
Velociraptor	Sysmon
Free The software is free under its open-source licence. Hosting, hardware and external…	Free Free download from Microsoft Sysinternals.
Windows, macOS, Linux	Windows, Linux, Command line
Its query language lets you collect arbitrary host state across a whole fleet on demand, and a single…	Detailed process and network event logging Persists across reboots as a service and driver
Writing useful collections means learning its query language, and a fleet deployment needs real planning.	No built-in interface for viewing or analysing events Needs a configuration file tuned to avoid noisy logs
Downloadable app	Downloadable app
Open source	Closed source
License: AGPL-3.0	License not stated
Not stated if an account is needed	No account needed
Not stated if it works offline	Works offline
Official website Full listing and sources Checked September 22, 2026	Official website Full listing and sources Checked September 23, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.