102 plaso(1) - Kailash Tool Reference
102.1 plaso
plaso - log2timeline — super-timeline generation and analysis.
| Layer | CLASSIC |
| Category | c-09-forensics-ir-reporting |
| Safety class | safe |
| Licence | Apache-2.0 |
| Upstream | github.com/log2timeline/plaso |
102.1.1 NAME
plaso - log2timeline — super-timeline generation and analysis.
102.1.2 SYNOPSIS
Not derived automatically - see upstream documentation. This page does not hand-copy flags (generation contract, ADR-0001).
102.1.3 DESCRIPTION (upstream)
Plaso (Plaso Langar Að Safna Öllu), or super timeline all the things, is a Python-based engine used by several tools for automatic creation of timelines. Plaso default behavior is to create super timelines but it also supports creating more targeted timelines. These timelines support digital forensic investigators/analysts, to correlate the large amount of information found in logs and other files found on an average computer. The initial purpose of Plaso was to collect all timestamped events of interest on a computer system and have them aggregated in a single place for computer forensic analysis (aka Super Timeline). How
102.1.4 SEE ALSO
- Category: c-09-forensics-ir-reporting in the category directory (sister tools listed there).
ref: pin - verified 2026-10-14