Plaso (log2timeline)

venv

Builds a unified super-timeline from disparate forensic artefacts.

Location

/opt/detectops/threat-hunting/plaso-venv

How to run

source /opt/detectops/threat-hunting/plaso-venv/bin/activate
log2timeline timeline.plaso ./image.dd

Reference

https://github.com/log2timeline/plaso

---

Part of the Threat Hunting & Endpoint Analysis toolset in DetectOps.