@el_killerdwarf Does the precompiled Windows plaso allow new parsers, or do I need to run from source / build my own?
@bbaskin @el_killerdwarf this is the 6th time I've installed #plaso on Mac and I've become exceedingly efficient at it. I'm down to 15min
-
-
@bethlogic@el_killerdwarf Found a few stumbling points, like pytsk not compiling due to lack of strnlen (had to apply its patch in Issue 1)Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@bethlogic@el_killerdwarf Now that I've figured them out, I could see 15 mins :) Trying to document my hiccups to help out the next person. -
@bbaskin@bethlogic@el_killerdwarf I know you're good about sharing, but I'll just mention that I'm interested in your final notes :-) -
@williballenthin definitely, when (if) the parser is done and published I'll write up a blog post on the process.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.