New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add support for plaso dsv parser generation #73

Open

joachimmetz opened this issue Mar 21, 2019 · 1 comment

Assignees

Labels

Member

joachimmetz commented Mar 21, 2019

For plaso support generating a DSV-based (delimiter separated) parser

kiddinn self-assigned this

kiddinn added the enhancement label

Member

kiddinn commented Mar 21, 2019

The DSV parser: https://github.com/log2timeline/plaso/blob/master/plaso/parsers/dsv_parser.py

And a sample parser that uses the DSV parser: https://github.com/log2timeline/plaso/blob/master/plaso/parsers/mactime.py

Mactime can probably be used as the basis for the template.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment