Build super timelines from mixed forensic artifacts with Plaso

Ingest disk, log, and system artifacts into a sortable forensic timeline before analysis, scoping, or case review.

Prerequisites

Plaso tooling such as log2timeline and psort, Python environment, artifact set or disk image to parse

Installation

No source-backed install or usage instructions could be extracted automatically. Review the upstream project before running this skill in a sensitive workflow.

• Source: https://github.com/log2timeline/plaso

Documentation

• https://plaso.readthedocs.io/en/latest/

Source

• Agent Skill Exchange