tag:blogger.com,1999:blog-4080617372940068027.post8986552601425433148..comments2024-03-13T01:32:25.097-04:00Comments on Journey Into Incident Response: Timeline Analysis by CategoriesCorey Harrellhttp://www.blogger.com/profile/15008629321023489214noreply@blogger.comBlogger5125tag:blogger.com,1999:blog-4080617372940068027.post-21604341472869396652014-10-24T09:27:49.997-04:002014-10-24T09:27:49.997-04:00A great visual tool that works on top of plaso is ...A great visual tool that works on top of plaso is 4n6time http://plaso.kiddaland.net/usage/4n6timeBellerophonhttps://www.blogger.com/profile/02212497479825031103noreply@blogger.comtag:blogger.com,1999:blog-4080617372940068027.post-49118099062622600282014-10-22T11:05:37.897-04:002014-10-22T11:05:37.897-04:00Thanks for this interesting post and for pointing ...Thanks for this interesting post and for pointing to this tagging functionalityThierry_Frnoreply@blogger.comtag:blogger.com,1999:blog-4080617372940068027.post-1364462511878257672014-10-22T09:49:56.231-04:002014-10-22T09:49:56.231-04:00The tag_jiir.txt is still a work in progress so I&...The tag_jiir.txt is still a work in progress so I'm not releasing it yet. I have a ton of work to do for it to be completed and be ready for public consumption. In addition, I still need to create a filter file to go along with it. This is to reduce the time it takes to create timelines.Corey Harrellhttps://www.blogger.com/profile/15008629321023489214noreply@blogger.comtag:blogger.com,1999:blog-4080617372940068027.post-15154052280485252442014-10-22T08:56:17.630-04:002014-10-22T08:56:17.630-04:00Any chance we can get your work in progress tag fi...Any chance we can get your work in progress tag file. I think this is what i'm looking for as it seems similar to the SANS508 excel filters for trying to sift through the mounds of data.<br />Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-4080617372940068027.post-25154608665962867282014-10-22T08:46:03.291-04:002014-10-22T08:46:03.291-04:00Hi corey,
It's possible for us to share the t...Hi corey,<br /><br />It's possible for us to share the tag_jirr.txt ?<br /><br />ThxTeck0https://www.blogger.com/profile/15546611396432938733noreply@blogger.com