Daniel White

Create style guide for EventData contents

7

Points to cover: - What level of meaning to aim for in eventdata vs formatter (bool/string) - Naming conventions

**Description of problem:** Parser for redis logs Some information on format: https://build47.com/redis-log-format-level **Command line and arguments:** N/A **Source data:** Please provide the source data you used when you experienced the...

Add SNSS parser

1

Add a (possibly plugin-based) parser for Chrome SNSS-formatted files (Current session, last tabs etc.). Existing work: https://github.com/JRBANCEL/Chromagnon/wiki/Reverse-Engineering-SNSS-Format https://github.com/deactivated/python-snss

Likely need a plugin-based approach

Write parsers for Antivirus log/quarantine files

1

Ref: http://hexacorn.com/d/DeXRAY.pl https://github.com/brad-accuvant/cuckoo-modified/blob/master/lib/cuckoo/common/quarantine.py

Add type annotations

2

https://github.com/google/pytype

https://github.com/apache/tika "Apache Tika(TM) is a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries."

Ref https://github.com/log2timeline/plaso/issues/2365

Profiling plaso indicates a lot of time is spent doing string manipulation to generate comparable representations of pathspecs and similar objects. These could be calculated once and stored in the...

Clarify the difference between FileIO and FileObjectIO

1

This is confusing, as the names are similar but the functionality different.