Developing on MacOS¶
To download the latest version of Plaso you’ll need to install the git tools.
Checkout the plaso source from the git repo:
git clone https://github.com/log2timeline/plaso.git
Install the dependencies, using either:
Check if you have all the dependencies installed and have the right minimum version:
Note that some dependencies are actively under development and can be frequently updated, therefore we recommend checking the status of the dependencies regularly.
check_dependencies.py keeps indicating it detected an out of date version
check if the following directory might still contain an older version:
Apple also ships version 2.0.1 of pyparsing under
/System/Library/Frameworks/Python.framework which is loaded first, even
if you have a newer pyparsing installed. You can work around this by specifying
the PYTHONPATH when you run one of the command line tools - try
PYTHONPATH=/Library/Python/2.7/site-packages:$PYTHONPATH ./tools/log2timeline.py --help
if you’re having problems.
If you intend to do development on plaso you’ll also need to install some development tools: