User documentation

• How to get started
  • How to get started
  • Installing the packaged release
  • Before we start
    • I know the good old Perl version
  • The tools
    • image_export
    • log2timeline
    • pinfo
    • psort
    • psteal
• Creating a timeline
  • Using psteal
  • Using log2timeline and psort
• Using collection Filters
  • Using Forensic Artifacts definitions
  • Using filter files
    • Text-based filter file format
    • YAML-based filter file format
  • References
• Event filters
  • How do event filters work
  • Example event filter expressions
  • Value type helpers
    • Date and time value helper
  • References
• Analysis plugins
• Tips and Tricks
  • Import the output of a third party tool into Plaso
• Log2Timeline Perl (Legacy)
  • Old method
  • New method