Change tools to support more than 1 source (input) file

log2timeline / plaso

Super timeline all the things

https://plaso.readthedocs.io

Apache License 2.0

1.72k stars 348 forks source link

Open joachimmetz opened 5 years ago

joachimmetz commented 5 years ago

Change tools to support more than 1 source (input) file

does this require changes to storage to handle more than one source?
track source configuration per event data stream?
map mount point to source (volume/file system)
- use dfvfs mount manager - https://github.com/log2timeline/plaso/issues/101
- https://github.com/log2timeline/plaso/issues/3019

joachimmetz commented 3 years ago

joachimmetz commented 2 years ago

Not quite there yet, for this to correctly work need to be able handle multiple system configurations per source. Blocked on https://github.com/log2timeline/plaso/issues/2675