Plaso 20190429 released

Plaso 20190429 released

A little later than usual, the Plaso team are glad to announce a new Plaso release, 20190429. A few user-facing things you might notice:

  • We’ve changed the shebangs to Python 3, this means if Plaso tools are run without a specific Python version on Linux and MacOS a Python 3 interpreter will be invoked.
  • Psort now shows the event counters as part of the status view.
  • Extraction errors have been renamed to warnings, to reflect that these don't necessarily indicate a fatal condition.

Other changes

As usual, there’s a bunch of cleanups, performance tweaks and bug fixes, the full list of which are available in the release milestone.

Future plans

As flagged previously, we’re ending support for Ubuntu Xenial. While there is a packaged release on 20190429, there will be no further releases for Xenial.

Note that version 20190429 of plaso-tools for Xenial and Bionic use Python 3. If you use multiple package managers (for example, pip and apt) make sure to use the right versions.

We strongly encourage the use of a single package manager to prevent issues due to Python version conflicts.

Where/how to get Plaso 20190429?

See Plaso's Users' Guide. As usual, builds are available for DockerMacOSUbuntuFedora Core and Windows.

If you run into problems take a look at the Installation Problems page in the Plaso documentation, to see if other people have seen the issue before. If nothing there helps, ask for help on the discuss mailing list or open an issue on the tracker.

Comments

Popular posts from this blog

Parsing the $MFT NTFS metadata file

Incident Response in the Cloud

Container Forensics with Docker Explorer