plaso
plaso copied to clipboard
Change preprocessor and knowledge base to handle more than one system configuration
Copied from add multi volume support #109
Change preprocessor and knowledge base to handle more than one system configuration
- [ ] Have a closer look at https://github.com/log2timeline/plaso/issues/4781
- [ ] have mediators directly use storage and system configurations
- https://github.com/log2timeline/plaso/pull/4609
- https://github.com/log2timeline/plaso/pull/4612
- [ ] have preprocessor generate system configurations
- [ ] deprecate and remove knowledge base
- [ ] Support per source path spec storage of system configuration https://github.com/log2timeline/plaso/issues/1651
- [ ] ask user to select and confirm preprocess information?