plaso icon indicating copy to clipboard operation
plaso copied to clipboard

AWS CloudTrail parser

Open alexgoedeke opened this issue 3 years ago • 1 comments

Description of problem:

The aws cloud trail log parser does not work with current cloudtrail data.

Source data:

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-log-file-examples.html

Plaso version:

For example 20220724

alexgoedeke avatar Aug 08 '22 11:08 alexgoedeke

Please see comments on related PR #4187 - This parser is designed for logs saved in JSON-L format.

jonathan-greig avatar Sep 02 '22 03:09 jonathan-greig