Skip to content

How to write a parser plugin

Daniel White edited this page Nov 28, 2018 · 2 revisions

Deprecation warning

:warning: The Plaso Github wiki is now deprecated

:warning: Content was migrated to ReadTheDocs

:warning: The information below is likely to be out of date.

:warning: To update the current documentation, send a pull request for change to a file in the docs subdirectory of the Plaso source tree.

Writing a parser plugin is different, depending on which parser you're writing a plugin for. Parsers that support plugins are:

  • bencode
  • cookie
  • esedb
  • olecf
  • plist
  • sqlite
  • syslog
  • winreg
Clone this wiki locally
You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.