Skip to content

Move Plaso image_export to imagetools #1

@joachimmetz

Description

@joachimmetz

As part of the effort to make parts of Plaso more reusable, move Plaso image_export to the imagetools project

  • determine if artifact filter and pre-processing logic should be moved to a separate project
  • filter based on artifact definitions
  • filter based on single path - Worked on script to extract data streams #1 #98
  • filter based on find specs (use YAML filter file?)
    • date and time range (image export --date-filter)
    • filename (image export --names)
    • filename extension (image export --extentensions)
  • filter based on (content) signatures (image export --signatures)
  • generate hashes.json output

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions