Development Release MacOS¶
To download the latest version of Plaso you’ll need to install the git tools: http://git-scm.com/downloads
Checkout the plaso source from the git repo:
git clone https://github.com/log2timeline/plaso.git
To be able to run the plaso development release on MacOS you’ll have to have installed the dependencies.
Check if you have all the dependencies installed and have the right minimum version:
./utils/check_dependencies.py
Note that some dependencies are actively under development and can be frequently updated, therefore we recommend checking the status of the dependencies regularly.
If check_dependencies.py keeps indicating it detected an out of date version check if the following directory might still contain an older version:
/System/Library/Frameworks/Python.framework/Versions/2.7/Extras/lib/python/
Apple also ships version 2.0.1 of pyparsing under /System/Library/Frameworks/Python.framework which is loaded first, even if you have a newer pyparsing installed. You can work around this by specifying the PYTHONPATH when you run one of the command line tools - try PYTHONPATH=/Library/Python/2.7/site-packages:$PYTHONPATH ./tools/log2timeline.py --help if you’re having problems.
Development tools¶
If you intend to do development on plaso you’ll also need to install some development tools:
- PyLint 1.7.x
- Python Mock