Plaso
7.3#2 in digital forensics softwareFree planFree planAPILinuxmacOSSelf-hosted
Visit| Fact | Plaso | X-Ways Imager |
|---|---|---|
| Purpose | Plaso is a Python-based engine used by tools to create super timelines or more targeted timelines for digital forensic analysis. | X-Ways Imager is a forensic disk imaging tool and a stripped-down version of X-Ways Forensics focused on imaging functionality. |
| Support | The project directs users to its discussion mailing list, Open Source DFIR Slack community, troubleshooting guide, and GitHub issue tracker; contributions are best effort. | The maker lists general or technical inquiries by email and says to check the program help or user manual first. |
Plaso suits digital forensic practitioners who need to collect and analyze timelines from files, devices, logs, or storage images. Its parser and plug-in framework may also suit users extending forensic workflows.
You want what its maker publishes above — check its page for the details.