Developing on MacOS


To download the latest version of Plaso you’ll need to install the git tools.

Checkout the plaso source from the git repo:

git clone


Install the dependencies, using either:

Check if you have all the dependencies installed and have the right minimum version:


Note that some dependencies are actively under development and can be frequently updated, therefore we recommend checking the status of the dependencies regularly.

If keeps indicating it detected an out of date version check if the following directory might still contain an older version:


Apple also ships version 2.0.1 of pyparsing under /System/Library/Frameworks/Python.framework which is loaded first, even if you have a newer pyparsing installed. You can work around this by specifying the PYTHONPATH when you run one of the command line tools - try PYTHONPATH=/Library/Python/2.7/site-packages:$PYTHONPATH ./tools/ --help if you’re having problems.

Development tools

If you intend to do development on plaso you’ll also need to install some development tools:

  • PyLint 1.9.x

  • Python Mock