Build super timelines from mixed forensic artifacts with Plaso

Ingest disk, log, and system artifacts into a sortable forensic timeline before analysis, scoping, or case review.

agentskillexchange Updated 28 repo stars

File contents

Build super timelines from mixed forensic artifacts with Plaso

Ingest disk, log, and system artifacts into a sortable forensic timeline before analysis, scoping, or case review.

Prerequisites

Plaso tooling such as log2timeline and psort, Python environment, artifact set or disk image to parse

Installation

No source-backed install or usage instructions could be extracted automatically. Review the upstream project before running this skill in a sensitive workflow.

Documentation

Source

agentskillexchange/skills/tree/main/skills/build-super-timelines-from-mixed-forensic-artifacts-with-plaso commit 41fcc40bd3

Frequently asked questions

npx skillmds@latest add agentskillexchange/build-super-timelines-from-mixed-forensic-artifacts-with-pla