Skip to content

Move Plaso image_export to imagetools #1

@joachimmetz

Description

@joachimmetz

As part of the effort to make parts of Plaso more reusable, move Plaso image_export to the imagetools project

  • determine if artifact filter and pre-processing logic should be moved to a separate project
  • filter based on artifact definitions
  • filter based on single path - Worked on script to extract data streams #1 #98
  • filter based on find specs (use YAML filter file?)
    • date and time range (image export --date-filter)
    • filename (image export --names)
    • filename extension (image export --extentensions)
  • filter based on (content) signatures (image export --signatures)
  • generate hashes.json output

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions