Plaso has a new feature where it is possible to provide your own formatter definition file that will override/extend the build in formatters. This enable us to alter some message strings to better align with Timesketch UX goals.
For example: We can show Event Log message strings up front whenever they are available.
Plaso has a new feature where it is possible to provide your own formatter definition file that will override/extend the build in formatters. This enable us to alter some message strings to better align with Timesketch UX goals.
For example: We can show Event Log message strings up front whenever they are available.