How To Use Log2timeline!

Walk through for Windows.

Rio Weber
Rio Weber in dfclub
Apr 26, 2017 · 3 min read

START:

PART #1 — Set Up


PART #2 — Command Line

log2timeline.exe "C:\OUTPUT_1.plaso" "C:\INPUT_PATH\IMAGE.E01"
psort.exe -z US/Pacific -o l2tcsv -w "C:\FINAL_TIMELINE_OUTPUT.csv" "C:\INPUT_PATH\OUTPUT_1.plaso"

./END


OPENING AND UNDERSTANDING THE CSV

./START

PART #1 — TIMELINE_COLOR_TEMPLATE

./DONE

dfclub

Bloomsburg University Digital Forensics Club.

Rio Weber

Written by

Rio Weber

It doesn’t get better than this.

dfclub

dfclub

Bloomsburg University Digital Forensics Club.