Working with log2timeline and Timesketch

Описание

This video goes over how to quickly generate Timelines using log2timeline for both Linux and Windows systems. It also explains how to do targeted timelines for certain artifacts. Finally, it shows how you can upload your timelines to Timesketch, which is a system created by the Google #DFIR team and start analyzing your timelines within Timesketch.

Resources:
https://timesketch.org/
https://plaso.readthedocs.io/