Deploy Windows clients¶

Use one of the preserved client deployment options, then verify that the Windows endpoint appears in the Velociraptor Admin GUI.

Deploying Velociraptor Clients (Windows)¶

Option 1: Create an Installation Package for Windows clients¶

In the Velociraptor web GUI select Server Artifacts from the sidebar on the left side of the page.

Add a new collection (”+” icon). Search for Server.Utils.CreateMSI, select it, and then click “Launch”.

It may take a short while to download the latest MSI releases from GitHub (64-bit and, if selected, 32-bit) and repackage them with your client configuration. Once complete, the rebuilt MSI files will be available in the Uploaded Files tab of the collection.

Download the MSI files, then double-click the installer to install the client.

If prompted by Windows SmartScreen, click More info, then select Run anyway.

Navigate to C:\Program Files\Velociraptor. After a successful installation, you should see velociraptor.writeback.yaml in that directory.

Option 2: Download Official Release MSI¶

Download the latest Velociraptor MSI from the Velociraptor GitHub releases page. On your Windows host, double-click the MSI to install it.

Once installed, navigate to C:\Program Files\Velociraptor and delete the existing default client.config.yaml file.

The easiest way to obtain the correct client config file is to download it directly from the GUI. From the Home screen, go to Current Orgs and click the filename to download the YAML file.

Copy the downloaded client.config.yaml into C:\Program Files\Velociraptor.

After this, you should see velociraptor.writeback.yaml appear in the same directory. If it doesn’t appear, restart the computer.

Verify Client Connection¶

On the Velociraptor Server web GUI, click on the magnifying glass icon and verify that your client is connected.

Any client that has successfully enrolled will show a green light.