There is a --rm missing when running the plaso container. This leaves a bunch of stopped containers after using that importer.
|
args := []string{"run", "-v", "/tmp/:/tmp", "log2timeline/plaso", "image_export", "--logfile", logFile, "--partitions", "all", "--volumes", "all", "-w", exportDir, sourcePath} |