Getting started

Joachim Metz edited this page Sep 18, 2016 · 9 revisions

Getting started with log2timeline plaso can be challenging at first. This page describes some of the steps we recommend taking.

I just want to run plaso log2timeline

If you just want to run plaso we recommend to use a packaged release unless you are the adventurous type.

To get started have a look at the User Guide.

If you have questions, suggestions and want to discuss them join the general discussions mailing list: log2timeline-discuss

I want to develop plaso log2timeline

There are various ways to develop with plaso. We expect the more common use case that you would like to extend plaso by adding a parser or plugin or equivalent.

For this you'll need to use a development release.

Get a github and gmail account and enable 2-factor authentication.

To get started have a look at the Developers guide and Codelabs.

Note that the codelabs currently reflect plaso 1.2 and we are working on updating them to reflect plaso 1.3

Last but not least we also recommend joining the development mailing list: log2timeline-dev

But I don't know how to use git

But I don't know how to program in Python

TODO add links

Clone this wiki locally
You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.
Press h to open a hovercard with more details.