Plaso & Timesketch — Romain Gayon
Date : 03 June 2016 à 12:45 — 15 min.
Plaso aims to be the open source Swiss army knife of forensics timelining, while timesketch brings visualization, collaboration and cross-systems analysis capabilities to the busy forensics analyst.
This talk will sketch a big picture of the inner workings of the tools, as well as a summary of the features.