security/plaso 20260720 OpenBSD
engine and tools to automate creation of super timeline
- System
- OpenBSD
- Repository
- OpenBSD ports
- Maintainer
- Sebastian Reitenbach <[email protected]>
- Last update
- Commit
b4d274e3b3- Categories
- security, lang/python
Description
plaso is a Python-based framework for computer forensic analysis. It can read files from many types of filesystem and volume image, has parsers for a huge number of file types across multiple platforms, and tools to deal with this information, in particular log2timeline which can use this to produce a single correlated timeline from a system.
Install
Binary package:
pkg_add plaso
From the ports tree:
cd /usr/ports/security/plaso && make install
Dependencies
Build dependencies 5
Run dependencies 60
- archivers/py-lz4
- archivers/py-zstd
- databases/py-redis
- devel/py-acstore
- devel/py-bencode
- devel/py-certifi
- devel/py-cffi
- devel/py-dateutil
- devel/py-dtfabric
- devel/py-flor
- devel/py-parsing
- devel/py-tz
- devel/py-xlsxwriter
- lang/python/3
- net/py-zmq
- security/libbde
- security/libewf
- security/py-artifacts
- security/py-dfdatetime
- security/py-dfvfs
- security/py-dfwinreg
- security/py-pefile
- security/yara/python
- sysutils/libesedb
- sysutils/libevt
- sysutils/libevtx
- sysutils/libfsapfs
- sysutils/libfvde
- sysutils/libfwnt
- sysutils/libfwsi
- sysutils/liblnk
- sysutils/libluksde
- sysutils/libmsiecf
- sysutils/libolecf
- sysutils/libqcow
- sysutils/libregf
- sysutils/libscca
- sysutils/libsigscan
- sysutils/libsmdev
- sysutils/libsmraw
- sysutils/libvhdi
- sysutils/libvmdk
- sysutils/libvshadow
- sysutils/libvslvm
- sysutils/libyal/libcaes
- sysutils/libyal/libcreg
- sysutils/libyal/libfcrypto
- sysutils/libyal/libfsext
- sysutils/libyal/libfsfat
- sysutils/libyal/libfshfs
- sysutils/libyal/libfsntfs
- sysutils/libyal/libfsxfs
- sysutils/libyal/libmodi
- sysutils/libyal/libphdi
- sysutils/libyal/libvsapm
- sysutils/libyal/libvsgpt
- sysutils/py-psutil
- sysutils/py-tsk
- textproc/py-defusedxml
- www/py-requests
No port depends on this one.