plaso icon indicating copy to clipboard operation
plaso copied to clipboard

Enhance support for MacOS unified logs

Open joachimmetz opened this issue 2 years ago • 0 comments

As a follow up of https://github.com/log2timeline/plaso/issues/2242

  • [ ] add support for plist statedump
  • [ ] add support for more value decoders
  • [ ] add support for stream start timesyncEvents
  • [ ] add support for multi block LZ4 compressed data

joachimmetz avatar Jun 17 '23 19:06 joachimmetz