OpenBSD Handbook

Current snapshot · amd64 · Generated 2026-09-09

plaso-20260720

engine and tools to automate creation of super timeline

Back to search · Project homepage

Description

plaso is a Python-based framework for computer forensic analysis. It can read files from many types of filesystem and volume image, has parsers for a huge number of file types across multiple platforms, and tools to deal with this information, in particular log2timeline which can use this to produce a single correlated timeline from a system.

Package information

Ports path
security/plaso
Package architecture
amd64
Maintainer
Sebastian Reitenbach <sebastia@openbsd.org>
Categories
security, lang/python
Available flavors
None listed
Only for architectures
aarch64, amd64, arm, i386, mips64, mips64el, powerpc, powerpc64, riscv64, sparc64, alpha, hppa

These are ports metadata. Binary availability depends on the release, architecture and mirror. Build and test dependencies are not an installation checklist.

Direct dependencies

Runtime

Build

Test

Installing and updating packages · Package details as JSON