← All tools

Plaso (log2timeline)

https://github.com/log2timeline/plaso

Open Source ◆ Kali Linux

Categories

Forensics

Description

Timeline creation and analysis tool. Extracts timestamps from hundreds of artifact types across Windows, Linux, and macOS to create a super-timeline for incident response and forensic analysis.

Keywords

timeline analysis incident response forensics Windows Linux artifacts log analysis super-timeline

Example Usage

log2timeline.py timeline.plaso image.dd
psort.py -o l2tcsv -w output.csv timeline.plaso
pinfo.py timeline.plaso