Rapid7 Velociraptor component update
This update only applies to Rapid7 MDR customers.
To better enable MDR analysts to investigate alerts, we are enabling internal access to Hosted Velociraptor for all MDR customers. Note, this deployment process is ongoing and is expected to be completed by early December 2024.
Enablement requires the installation of a new sub-component named rapid7_velociraptor on assets that are running the Insight Agent. This sub-component is a version of the Velociraptor endpoint client that can only communicate with the Rapid7 Platform.
When the deployment is complete, only MDR analysts will be able to access Hosted Velociraptor for their customers (unless the customer has purchased MTC Ultimate, IDR Ultimate, or the Velociraptor add-on feature).
Your assets will be updated automatically with the latest Rapid7 Velociraptor versions only if you enable Insight Platform-managed updates and keep them at the latest version. If you use managed updates but lock the agent to a specific version, your agents will get the Velociraptor component the next time you update your agents to a later version. Read more in the managed agent updates documentation.
No further action is required if automatic updates are enabled. If you are not set up for automatic updates and Velociraptor is not already deployed, contact your Rapid7 Customer Advisor to arrange a convenient time to deploy Velociraptor.