abrignoni / abrignoni/iLEAPP

Update Timeline Output

Abierto
#766 0 comentarios 0 reacciones 0 asignados Ver en GitHub
enhancement
Lenguaje dominante
Python
Estrellas
1.2k
Forks
303
Merge medio
4 h 32 min
PR fusionados (30 d)
216

Descripción

Timeline output is currently in a SQLite file. The date column is a string in `RFC 3339` while many tools expect it to be in `ISO 8601'. That said many tools don't recognize SQLite as input. Suggestion is to leave the current SQLite output as is since some users may be using its output for ingestion to other tools, and create new output file options for allowing ingestion into some of the common tools from wider used formats.

## Tools and Formats
### Timesketch with CSV
https://github.com/google/timesketch/blob/master/docs/guides/user/import-from-json-csv.md

### TLN Format
https://windowsir.blogspot.com/2009/02/timeline-analysis-pt-iii.html

### IEF (Axiom?) with TLN
https://docs.magnetforensics.com/docs/ief/html/Content/en-us/ief/View_Artifact_Activity_Graphically.htm

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.