#plaso - Twitter Hashtag

over 2 years ago

Interesting new room IR Timeline Analysis from @tryhackme : Learn about timeline analysis using various tools and scenarios. Learned new tools: Plaso & Timesketch https://t.co/Q2Lz41PngV #tryhackme #Plaso #Timesketch #dfir

DjalilAyed's tweet photo. Interesting new room IR Timeline Analysis from @tryhackme : Learn about timeline analysis using various tools and scenarios.

Learned new tools: Plaso & Timesketch

https://t.co/Q2Lz41PngV

#tryhackme #Plaso #Timesketch #dfir https://t.co/j76hxqjo7Q

1

8

0

265

Tony Lambert @ForensicITGuy

about 3 years ago

New blog post! Building on my last post about malware distro via VHD, I walk through creating a simple timeline of the VHD with Plaso to show how you can get more data for intelligence. https://t.co/1swp7MTtsz #malware #plaso

1

52

20

15

8K

Wes Lambert

@therealwlambert

almost 4 years ago

That's it for now! Stay tuned to learn about more artifacts! 🦖 #DFIR #Forensics #Infosec #Plaso #ThreatHunting #Timesketch

1

2

0

Josh Lemon @joshlemon

over 4 years ago

The new update to #Plaso has a parser for #Azure #AWS and #GCP logging. That's freaking amazing! Thanks @jonathan_greig for writing the parser...I definitely need to check this out. #FOR509 #CloudForensics #DFIR https://t.co/QDJSy4IDxy

1

19

8

2

0

Ryan "Chaps" Chapman

@rj_chap

over 4 years ago

Anyone have a set of #TimeSketch analyzers for Windows Event logs that is FOSS? e.g. #Plaso-parsed EVTX logs don't pull things out like IpAddress from 4624/5 events. I have a few that I use but wondering if there exists a repo, nice set, exchange, etc. #blueteam #DFIR

2

15

6

0

Gigasheet @gigasheet

almost 5 years ago

Check out the latest December release☃️ features in Gigasheet IDGAF, our new monthly newsletter: https://t.co/W6pfzoUH6D Create a free account at https://t.co/OFstKPMf3d to try for yourself! #idgaf #SaaS #nocode #dfir #bigdata #Analytics #securityanalytics #plaso #Log4j

0

2

1

0

Gigasheet @gigasheet

almost 5 years ago

We now support #Log2Timeline CSVs 🌟 Stop limiting your psteal output size! Gigasheet #nocode #saas lets anyone analyze huge CSVs - 100m+ rows - and it's free. Sign up at https://t.co/OFstKPMf3d https://t.co/WRBVYX2y0X #dfir #plaso #incidentresponse #blueteam

0

1

0

Gigasheet @gigasheet

almost 5 years ago

New & improved ✨ handling of output from #Plaso #Log2Timeline - You can now analyze HUGE output CSV files in Gigasheet. Try it with https://t.co/Z3504Wu5ti and upload the CSV for easy analysis no matter how many lines long it is. #DFIR #forensics #BlueTeam #IncidentResponse #IR

0

3

1

0

Xakep.ru @XakepRU

about 5 years ago

Цифровой детектив. Используем Timesketch для работы с таймлайнами Plaso #siem #plaso #timesketch #подписчикам https://t.co/adWvGNUz12

XakepRU's tweet photo. Цифровой детектив. Используем Timesketch для работы с таймлайнами Plaso #siem #plaso #timesketch #подписчикам

https://t.co/adWvGNUz12 https://t.co/7168xsRm89

0

2

0

Xakep.ru @XakepRU

about 5 years ago

Таймлайн всего. Используем Plaso для сбора системных событий #plaso #forensics #подписчикам https://t.co/V4wm6XjLe0

0

3

0

DFN-CERT | @[email protected] @DFNCERT

over 5 years ago

🥳 Neue Version von #plaso/#log2timeline erschienen! "super timeline all the things" #DFIR ➡️ https://t.co/cs96noYJPc

1

5

2

0

Mahmoud Abo Alenen @Maboalenen

over 5 years ago

NTFS #timeline creation using #plaso #Log2timeline , #Psort parsing with #ELK_DFIR_VM , #DFIR #forensics #BlueTeam #elasticsearch #IncidentResponse #IR #CyberSecurity

Maboalenen's tweet photo. NTFS #timeline creation using #plaso #Log2timeline , #Psort parsing with #ELK_DFIR_VM , #DFIR #forensics
#BlueTeam #elasticsearch #IncidentResponse #IR #CyberSecurity https://t.co/QgwMSKCTLD

1

10

4

0

DFN-CERT | @[email protected] @DFNCERT

over 5 years ago

🙌 Neue Version von #plaso/#log2timeline erschienen! "super timeline all the things" #DFIR ➡️ https://t.co/Mgco6gXW5C

0

7

4

2

0

sigalpes @[email protected] @sigalpes

about 6 years ago

I just updated plaso to latest release 20200717 on OpenBSD. Please test if you use it. #OpenBSD #DFIR #plaso

0

3

1

0

Eduardo Chavarro @EChavarro

over 6 years ago

Recolección de evidencia, super timelines y Cacería de amenazas: Un aproximación a la identificación de amenazas https://t.co/YeOCxbP6pK como integrar #Plaso #Velociraptor y #SigmaRules en el proceso de respuesta a Incidentes #DFIR via @csieteco

EChavarro's tweet photo. Recolección de evidencia, super timelines y Cacería de amenazas: Un aproximación a la identificación de amenazas https://t.co/YeOCxbP6pK como integrar #Plaso #Velociraptor y #SigmaRules en el proceso de respuesta a Incidentes #DFIR via @csieteco https://t.co/tvhkmDDsnq

0

9

12

1

0

SANS Institute

@SANSInstitute

over 6 years ago

Plaso is a widely adopted tool for creating timelines, which are crucial to a #DFIR analyst’s efforts to paint a picture of what happened on a device or in an incident. Grab this Free handy #Plaso Filtering Cheat Sheet for quick reference: https://t.co/4GnIYrnnoX

SANSInstitute's tweet photo. Plaso is a widely adopted tool for creating timelines, which are crucial to a #DFIR analyst’s efforts to paint a picture of what happened on a device or in an incident.

Grab this Free handy #Plaso Filtering Cheat Sheet for quick reference: https://t.co/4GnIYrnnoX https://t.co/TdUbWHWunK

0

9

4

0

Josh Lemon @joshlemon

over 6 years ago

A new release of #plaso came out a few days ago, this release has a big change with how NTFS volumes are read resulting in faster processing of them. #log2timeline #DFIR #IncidentResponse #DigitalForensics 🔗 https://t.co/LhIPNPA6SE

0

1

0

Shanholo @ShanHolo

over 6 years ago

The use of #Plaso framework for forensics is part on the research and It can be a nightmare for any #Forensicator bellow some tips based in my experience trying to avoid any waste of time and headaches 😜 #WindowForensic #DFIR #BlueTeam #CyberSecurity #4n6 #Log2timeline #Plaso