log2timeline/plaso issues and pull requests

#4953 - motherboard_info winreg plugin

Pull Request - State: open - Opened by elad-levi-cyberark 4 days ago - 1 comment

#4952 - Feature Request: Windows Registry Transaction Logs

Issue - State: open - Opened by elad-levi-cyberark 15 days ago - 1 comment
Labels: parsers

#4951 - Question regarding parser preset

Issue - State: open - Opened by william-billaud 16 days ago

#4950 - remove unused dependency on "six"

Pull Request - State: open - Opened by a-detiste about 1 month ago - 3 comments
Labels: blocked

#4949 - Feature: Map Extracted Files to Artifact Definitions in image_export.py

Pull Request - State: open - Opened by sa3eed3ed about 2 months ago - 1 comment

#4948 - Changes for deployment and CI tests

Pull Request - State: closed - Opened by joachimmetz about 2 months ago

#4947 - Changes for CI tests

Pull Request - State: closed - Opened by joachimmetz about 2 months ago - 1 comment

#4946 - Changes to documentation and CI tests

Pull Request - State: closed - Opened by joachimmetz about 2 months ago

#4946 - Changes to documentation and CI tests

Pull Request - State: closed - Opened by joachimmetz about 2 months ago

#4945 - Unable to run log2timeline.py on a new AWS AMI SIFT workstation.

Issue - State: closed - Opened by EW2025 about 2 months ago - 1 comment
Labels: invalid, deployment

#4945 - Unable to run log2timeline.py on a new AWS AMI SIFT workstation.

Issue - State: closed - Opened by EW2025 about 2 months ago - 1 comment
Labels: invalid, deployment

#4944 - SQLite parser for iOS Notes file

Pull Request - State: open - Opened by CandraTP 2 months ago

#4943 - Add SQLite parser for iOS Tiktok Contacts

Pull Request - State: open - Opened by annisadp 2 months ago

#4942 - Changed amcache.hve parser to extract file identifier and application key modification time

Pull Request - State: closed - Opened by coperni 2 months ago - 4 comments

#4941 - Add jpeg exif parser

Pull Request - State: open - Opened by oh6hay 2 months ago - 5 comments

#4940 - Add field for start cluster to fsstat events

Issue - State: closed - Opened by chrishargreaves 2 months ago - 10 comments
Labels: enhancement, question

#4939 - Add SQLite parser for Android Airtag (attd_db) file

Pull Request - State: open - Opened by hanamahes78 2 months ago

#4938 - Add SQLite parser for Files by Google (files_master_database) file

Pull Request - State: open - Opened by gustino7 3 months ago - 1 comment

#4937 - Add Google Call Screen SQLite Parser

Pull Request - State: closed - Opened by arilimata 3 months ago

#4936 - Changes in extraction tool to store filter file path (#4935)

Pull Request - State: open - Opened by nflexfo 3 months ago

#4935 - A typo in extraction tool prevents filter file path from being written into storage file

Issue - State: open - Opened by nflexfo 3 months ago

#4934 - Add SQLite parser for Android Viber Call (viber_data) file

Pull Request - State: open - Opened by aurelioklv 3 months ago - 1 comment

#4933 - Add iOS Location Services parsers

Pull Request - State: open - Opened by bimosyah 3 months ago - 1 comment

#4932 - Unable to run all parsers when pre-processor detects a suitable preset

Issue - State: open - Opened by nflexfo 3 months ago

#4931 - Add plugin ios_siminfo ke Plaso

Pull Request - State: open - Opened by fitrianhikma 3 months ago - 1 comment

#4930 - Add SQLite parser for Android App Launch (SimpleStorage) file

Pull Request - State: open - Opened by BeefRa 3 months ago - 1 comment

#4929 - Add SQLite parser for Android Native Downloads (downloads.db) file

Pull Request - State: open - Opened by ChristopherGammaWau 3 months ago - 1 comment

#4928 - Add SQLite parser for android burners app (burners.sqlite) file

Pull Request - State: open - Opened by brokamal 3 months ago - 3 comments

#4927 - Add iOS IMO HD chat message custom parser plugin

Pull Request - State: open - Opened by agusgiinarsa 3 months ago - 1 comment

#4926 - Add SQLite parser for iOS Accounts (Accounts3.sqlite) file

Pull Request - State: open - Opened by studiawan 3 months ago - 2 comments

#4925 - Add new parser plist plugin on iOS WiFi Known Networks

Pull Request - State: open - Opened by CopasAlpha26 3 months ago - 2 comments

#4924 - Processing doesn't finish with large E01 - version 20240826

Issue - State: open - Opened by benjamindonnachie 3 months ago - 1 comment

#4923 - Update Google Cloud Log parser plugin

Pull Request - State: open - Opened by roshanmaskey 3 months ago - 3 comments

#4922 - Add iOS WiFi Known Networks Parser

Pull Request - State: closed - Opened by CopasAlpha26 3 months ago

#4921 - Further IIS parsing improvements

Pull Request - State: open - Opened by pyllyukko 3 months ago - 1 comment

#4920 - Feature Request: Parsing PCAP

Issue - State: closed - Opened by JakePeralta7 4 months ago - 4 comments

#4919 - unable to determine version information for: flor

Issue - State: closed - Opened by tad-schlatre 4 months ago - 1 comment

#4918 - Updated GC log parser to include status fields

Pull Request - State: open - Opened by tmoney-coder 4 months ago - 3 comments

#4917 - Update Google Cloud Log Parser to include protoPayload.status

Issue - State: open - Opened by tmoney-coder 4 months ago

#4916 - Create plist parser plugins to read com.apple.MobileBackup.plist

Pull Request - State: open - Opened by rizabudi 4 months ago - 3 comments
Labels: pending reporter input

#4915 - Removed deprecated universal wheel configuration

Pull Request - State: closed - Opened by joachimmetz 4 months ago

#4914 - Remove bdist_wheel from setup.cfg

Issue - State: closed - Opened by joachimmetz 4 months ago

#4913 - Added Python 3.13 CI test target

Pull Request - State: closed - Opened by joachimmetz 4 months ago - 2 comments

#4912 - Changes to documentation

Pull Request - State: closed - Opened by joachimmetz 4 months ago

#4911 - IIS parser: Added additional characters for cs(Cookie) field

Pull Request - State: closed - Opened by pyllyukko 4 months ago - 2 comments

#4910 - IIS parser: Support User-Agents with square brackets

Pull Request - State: closed - Opened by pyllyukko 4 months ago - 1 comment

#4909 - Updated pylintrc to version 3.2

Pull Request - State: closed - Opened by joachimmetz 5 months ago - 1 comment

#4908 - Removed PyInstaller instructions

Pull Request - State: closed - Opened by joachimmetz 5 months ago

#4907 - Updated version

Pull Request - State: closed - Opened by joachimmetz 5 months ago - 1 comment

#4906 - Add support for 20240929 winevtrc database format with WEVT_TEMPLATE mapped event identifiers

Issue - State: open - Opened by joachimmetz 5 months ago
Labels: enhancement, output

#4905 - Changes to support newer winevtrc database format

Pull Request - State: closed - Opened by joachimmetz 5 months ago - 1 comment

#4904 - IIS parser: Support few more username variations

Pull Request - State: closed - Opened by pyllyukko 5 months ago - 3 comments

#4903 - IIS parser: add support for IPv6 addresses with zone index

Issue - State: open - Opened by pyllyukko 5 months ago
Labels: enhancement, parsers

#4902 - evtx: make tolerant for missing computer name

Issue - State: open - Opened by joachimmetz 5 months ago
Labels: enhancement, parsers

#4901 - a bunch of smaller typos

Pull Request - State: closed - Opened by jaegeral 5 months ago - 3 comments

#4900 - Changes to improve test coverage

Pull Request - State: closed - Opened by joachimmetz 6 months ago - 1 comment

#4899 - Changes to address TypeError exception in edge case

Pull Request - State: closed - Opened by certxlm 6 months ago - 7 comments
Labels: duplicate

#4898 - Updated release issue template

Pull Request - State: closed - Opened by joachimmetz 6 months ago

#4897 - Release plaso 20240826

Issue - State: closed - Opened by joachimmetz 6 months ago - 1 comment
Labels: deployment

#4896 - Changes for release

Pull Request - State: closed - Opened by joachimmetz 6 months ago

#4895 - Processing a bsdlabel and UFS2 disk image

Issue - State: open - Opened by Herbert-Karl 7 months ago - 2 comments
Labels: core

#4894 - Improved normalization of EventLog paths #4890

Pull Request - State: closed - Opened by joachimmetz 7 months ago - 1 comment

#4893 - text/apache_access warns about "Found a line preceeding match"

Issue - State: closed - Opened by AlexForensic 7 months ago - 9 comments

#4892 - Changes for Windows user account without profile #4891

Pull Request - State: closed - Opened by joachimmetz 8 months ago - 1 comment

#4891 - Empty username causes TypeError: unsupported format string passed to NoneType.format in debug log statement

Issue - State: closed - Opened by Melantrix 8 months ago - 5 comments

#4890 - IndexError: list index out of range in _GetNormalizedPath

Issue - State: closed - Opened by N1ckelange 8 months ago - 4 comments

#4889 - AttributeError: 'str' object has no attribute 'get' in DeserializeValue

Issue - State: closed - Opened by jloehel 8 months ago - 3 comments
Labels: storage, obsolete

#4888 - Changes to documentation

Pull Request - State: closed - Opened by joachimmetz 9 months ago

#4887 - How to integrate plaso/log2timeline into an airflow container?

Issue - State: closed - Opened by arnvtn 9 months ago - 1 comment
Labels: question, deployment

#4886 - Changes to documentation

Pull Request - State: closed - Opened by joachimmetz 9 months ago - 1 comment

#4885 - Add support for Hadoop YARN timeline server logs

Issue - State: open - Opened by sydp 9 months ago - 1 comment
Labels: parsers

#4884 - Changes for end-to-end tests

Pull Request - State: closed - Opened by joachimmetz 10 months ago

#4883 - CI tests failing

Issue - State: closed - Opened by joachimmetz 10 months ago - 1 comment
Labels: testing

#4882 - Changes for CI and nsrlsvr end-to-end tests #4883

Pull Request - State: closed - Opened by joachimmetz 10 months ago - 1 comment

#4881 - Implemented SQLite parser plugin for Android's app_usage database

Pull Request - State: closed - Opened by rick-slin 10 months ago - 4 comments

#4880 - Implemented SQLite parser plugin for android's turbo.db database

Pull Request - State: closed - Opened by rick-slin 10 months ago - 4 comments

#4879 - Add support for MS HTTP Error logs

Issue - State: open - Opened by sydp 10 months ago - 1 comment
Labels: parsers

#4878 - Implemented Apple biome file parser

Pull Request - State: open - Opened by rick-slin 10 months ago - 4 comments

#4877 - Failed to parse bitlocker encrypted image, but success with same image mounted with bdemount

Issue - State: open - Opened by certxlm 10 months ago
Labels: needs closer look

#4876 - winevtx: unable to parse evtx files without dependency identifier and string integer and FILETIME values

Issue - State: closed - Opened by tomchop 10 months ago - 5 comments
Labels: enhancement, parsers

#4875 - Unable to use parser in event filter after version 20230717?

Issue - State: closed - Opened by yowelf 11 months ago - 3 comments
Labels: question

#4874 - Removing unused dependencies (fixes issue #4873)

Pull Request - State: open - Opened by thinrope 11 months ago