Installing Plaso on Ubuntu¶
Ubuntu 18.04 LTS (bionic) and 20.04 LTS (focal)¶
Note that other versions of Ubuntu are not supported at this time.
To install Plaso from the GIFT Personal Package Archive (PPA) add the GIFT PPA:
sudo add-apt-repository ppa:gift/stable
Update and install Plaso:
sudo apt-get update sudo apt-get install plaso-tools
SANS Investigative Forensic Toolkit (SIFT) Workstation¶
SIFT workstation version 3 is currently using Ubuntu 16.04 and therefore currently not supported by the GIFT PPA.