← All tools

Plaso (log2timeline)

https://github.com/log2timeline/plaso

Open Source ◆ Kali Linux

Categories

Forensics

Description

Timeline creation and analysis tool. Extracts timestamps from hundreds of artifact types across Windows, Linux, and macOS to create a super-timeline for incident response and forensic analysis.

Keywords

timeline analysis incident response forensics Windows Linux artifacts log analysis super-timeline

Example Usage

log2timeline.py timeline.plaso image.dd
psort.py -o l2tcsv -w output.csv timeline.plaso
pinfo.py timeline.plaso

See also

Bulk Extractor

Open Source Kali

Scans a disk image, file, or directory and extracts features such as email addresses, URLs, credit c…

goodboy-framework

Open Source

15-stage Windows malware development & analysis course in Rust. Red team builds it, blue team detect…

spyder-osint

Open Source

Spyder OSINT GUI — Graphical open-source intelligence research tool for phone number lookup, IP geol…

speakeasy

Open Source

Windows kernel and user mode emulation.…

pe-sieve

Open Source

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/in…

soSaver

Open Source

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.…