×

Plaso

swMATH ID: 39055
Software Authors: Joachim Metz; et al.
Description: Plaso (Plaso Langar Að Safna Öllu), or super timeline all the things, is a Python-based engine used by several tools for automatic creation of timelines. Plaso default behavior is to create super timelines but it also supports creating more targeted timelines. These timelines support digital forensic investigators/analysts, to correlate the large amount of information found in logs and other files found on an average computer.
Homepage: https://plaso.readthedocs.io/en/latest/
Source Code:  https://github.com/log2timeline/plaso
Dependencies: Python
Related Software: Elasticsearch; NoDoze; AIQL; SAQL; LogLens; NodeMerge; LogGC; DTrace; GrAALF
Cited in: 0 Publications