Installing Plaso on Ubuntu

Ubuntu 18.04 LTS (bionic) and 20.04 LTS (focal)

Note that other versions of Ubuntu are not supported at this time.

To install Plaso from the GIFT Personal Package Archive (PPA) add the GIFT PPA:

sudo add-apt-repository ppa:gift/stable

Update and install Plaso:

sudo apt-get update
sudo apt-get install plaso-tools

SANS Investigative Forensic Toolkit (SIFT) Workstation

SIFT workstation is an independent project that provides Plaso releases. We strongly encourage to ensure you are running the latest version of Plaso when using SIFT.

If you are using SIFT and you have a deployment problem please report that directory to the SIFT project.