PlasoΒΆ

A tool designed to extract timestamps from various files found on a typical computer system(s) and aggregate them.

Command: log2timeline.py

Full documentation available at: http://plaso.kiddaland.net/