Plaso & TimesketchRomain Gayon

Plaso aims to be the open source Swiss army knife of forensics timelining, while timesketch brings visualization, collaboration and cross-systems analysis capabilities to the busy forensics analyst.

This talk will sketch a big picture of the inner workings of the tools, as well as a summary of the features.