List view

Change services Windows Registry plugin to use key path prefix filter

code healthNon-functional changes to improve code healthNon-functional changes to improve code health

parsersIssues related to parsers and parser plug-insIssues related to parsers and parser plug-ins

Status: Open.

#2636 In log2timeline/plaso;

· joachimmetz opened on Jun 12, 2019

add support for HKEY_CURRENT_USER in artifact definitions

enhancementNew or improved functionalityNew or improved functionality

Status: Open.

#2369 In log2timeline/plaso;

· joachimmetz opened on Feb 23, 2019

add support for %%users.username%% in artifact definitions

coreIssues relating to Plaso's core - processing, file access etc.Issues relating to Plaso's core - processing, file access etc.

enhancementNew or improved functionalityNew or improved functionality

Status: Open.

#2336 In log2timeline/plaso;

· joachimmetz opened on Feb 3, 2019

Collection filters are not correctly resolved for multiple partitions

blockedWork cannot progress until another issue is resolvedWork cannot progress until another issue is resolved

bug

preprocessingIssues related to preprocessingIssues related to preprocessing

Status: Open.

#396 In log2timeline/plaso;

· eoyslebo opened on Oct 29, 2015

Improve collection filters (filter file)

coreIssues relating to Plaso's core - processing, file access etc.Issues relating to Plaso's core - processing, file access etc.

enhancementNew or improved functionalityNew or improved functionality

toolsIssue related to the toolsIssue related to the tools

Status: Open.

#1537 In log2timeline/plaso;

· joachimmetz opened on Dec 1, 2017

add parser for Windows Event Log XML output

enhancementNew or improved functionalityNew or improved functionality

parsersIssues related to parsers and parser plug-insIssues related to parsers and parser plug-ins

Status: Open.

#442 In log2timeline/plaso;

· joachimmetz opened on Dec 15, 2015

Firefox SQLite parser plugin add support for fileSize attribute

enhancementNew or improved functionalityNew or improved functionality

parsersIssues related to parsers and parser plug-insIssues related to parsers and parser plug-ins

Status: Open.

#2539 In log2timeline/plaso;

· prats84 opened on May 24, 2019

Add tests for multi source artifact definition where the first source does not apply

testing

Status: Open.

#2330 In log2timeline/plaso;

· joachimmetz opened on Feb 2, 2019

Artifacts globstar support incomplete

code healthNon-functional changes to improve code healthNon-functional changes to improve code health

enhancementNew or improved functionalityNew or improved functionality

needs closer lookIssue that requires further analysis by a maintainerIssue that requires further analysis by a maintainer

Status: Open.

#2481 In log2timeline/plaso;

· aarontp opened on May 2, 2019

Killed workers are not removed

toolsIssue related to the toolsIssue related to the tools

UXIssues related to user experienceIssues related to user experience

Status: Open.

#2735 In log2timeline/plaso;

· kinky-it opened on Aug 8, 2019

Create style guide for EventData contents

blockedWork cannot progress until another issue is resolvedWork cannot progress until another issue is resolved

code healthNon-functional changes to improve code healthNon-functional changes to improve code health

documentationIssues relating to documentationIssues relating to documentation

outputOutput modules and output processOutput modules and output process

parsersIssues related to parsers and parser plug-insIssues related to parsers and parser plug-ins

Status: Open.

#2129 In log2timeline/plaso;

· Onager opened on Sep 6, 2018

Make parser filter expression more expressive

coreIssues relating to Plaso's core - processing, file access etc.Issues relating to Plaso's core - processing, file access etc.

enhancementNew or improved functionalityNew or improved functionality

idea

parsersIssues related to parsers and parser plug-insIssues related to parsers and parser plug-ins

Status: Open.

#3690 In log2timeline/plaso;

· joachimmetz opened on Jun 5, 2021

Add fallback knowledge-base pre-processor plugin for systemroot

enhancementNew or improved functionalityNew or improved functionality

idea

preprocessingIssues related to preprocessingIssues related to preprocessing

Status: Open.

#2410 In log2timeline/plaso;

· joachimmetz opened on Mar 27, 2019

Support for external parsers and plugins

enhancementNew or improved functionalityNew or improved functionality

idea

Status: Open.

#1249 In log2timeline/plaso;

· dc3-plaso opened on Jun 15, 2017

Add support for 20240929 winevtrc database format with WEVT_TEMPLATE mapped event identifiers

enhancementNew or improved functionalityNew or improved functionality

outputOutput modules and output processOutput modules and output process

Status: Open.

#4906 In log2timeline/plaso;

· joachimmetz opened on Oct 5, 2024

Create a dateless helper for logs with date-less timestamps

coreIssues relating to Plaso's core - processing, file access etc.Issues relating to Plaso's core - processing, file access etc.

enhancementNew or improved functionalityNew or improved functionality

Status: Open.

#4697 In log2timeline/plaso;

· rick-slin opened on Jun 22, 2023

Created parser for Apple IPS files.

Status: Open (in progress).

log2timeline/plasonumber 4688

#4688 In log2timeline/plaso;

· rick-slin opened on Jun 15, 2023

Support per source path spec storage of system configuration

enhancementNew or improved functionalityNew or improved functionality

preprocessingIssues related to preprocessingIssues related to preprocessing

Status: Open.

#1651 In log2timeline/plaso;

· joachimmetz opened on Jan 16, 2018

log2timeline.py fails to process large gzip input file

blockedWork cannot progress until another issue is resolvedWork cannot progress until another issue is resolved

coreIssues relating to Plaso's core - processing, file access etc.Issues relating to Plaso's core - processing, file access etc.

Status: Open.

#2746 In log2timeline/plaso;

· meeehow opened on Sep 12, 2019

Improve text parser and text file detection

coreIssues relating to Plaso's core - processing, file access etc.Issues relating to Plaso's core - processing, file access etc.

enhancementNew or improved functionalityNew or improved functionality

parsersIssues related to parsers and parser plug-insIssues related to parsers and parser plug-ins

Status: Open.

#479 In log2timeline/plaso;

· joachimmetz opened on Dec 29, 2015

Add bloom database hash tagging analysis plugin end-to-end test

analysisIssue related to analysis pluginsIssue related to analysis plugins

testing

Status: Open.

#4556 In log2timeline/plaso;

· joachimmetz opened on Jan 14, 2023

Improve vsftpd log parser

enhancementNew or improved functionalityNew or improved functionality

parsersIssues related to parsers and parser plug-insIssues related to parsers and parser plug-ins

Status: Open.

#3079 In log2timeline/plaso;

· joachimmetz opened on Jun 13, 2020

Windows Event Log message strings support enhancements

enhancementNew or improved functionalityNew or improved functionality

Status: Open.

#4822 In log2timeline/plaso;

· joachimmetz opened on Mar 2, 2024

Change preprocessor and knowledge base to handle more than one system configuration

coreIssues relating to Plaso's core - processing, file access etc.Issues relating to Plaso's core - processing, file access etc.

enhancementNew or improved functionalityNew or improved functionality

Status: Open.

#2286 In log2timeline/plaso;

· joachimmetz opened on Dec 24, 2018

Add jpeg exif parser

Status: Open (in progress).

log2timeline/plasonumber 4941

#4941 In log2timeline/plaso;

· oh6hay opened on Dec 12, 2024