Plaso (log2timeline)
User documentation
How to get started
Creating a timeline
Using collection Filters
Event filters
Analysis plugins
Tips and Tricks
Feature requests and bug reports
Log2Timeline Perl (Legacy)
Developer documentation
Troubleshooting
Supported formats
API documentation
Plaso (log2timeline)
User documentation
View page source
User documentation
How to get started
Getting start with Plaso
I just want to run Plaso or log2timeline
I know the good old Perl version
I want to develop Plaso
Releases
Installing the packaged release
Issues or questions
The tools
image_export
log2timeline
pinfo
psort
psteal
Creating a timeline
Using psteal
Using log2timeline and psort
Using collection Filters
Using Forensic Artifacts definitions
Using filter files
YAML-based filter file format
References
Event filters
How do event filters work
Example event filter expressions
Value type helpers
Date and time value helper
Path value helper
References
Analysis plugins
Tips and Tricks
Import the output of a third party tool into Plaso
Feature requests and bug reports
I would like to see support for a specific file format
GitHub issue tracker
Labels
Milestones
Log2Timeline Perl (Legacy)
Old method
New method