Issues

• text/selinux extracts no events from an ENRICHED audit.log: the text parser's binary check rejects the 0x1d separator

  log2timeline/plaso#5558 · Filter by author dont-do-this opened on Nov 12, 2026

• CI tests failing

  testing
  log2timeline/plaso#5541 · Filter by author joachimmetz opened on Nov 2, 2026
  2

  

• Consider merging style-guide documentation

  documentationmaintenance
  log2timeline/plaso#5529 · Filter by author joachimmetz opened on Nov 1, 2026
  2

• Update documentation to point to dfimagetools instead of dfvfs-snippets

  documentationmaintenance
  log2timeline/plaso#5526 · Filter by author joachimmetz opened on Nov 1, 2026
  1

• Add Markdown linter for documentation

  code healthmaintenance
  log2timeline/plaso#5525 · Filter by author joachimmetz opened on Nov 1, 2026

• Add check scripts as part of lint CI scripts

  log2timeline/plaso#5370 · Filter by author joachimmetz opened on Oct 22, 2026
  5

• Improve DtFabricHelper to parse its dtFabric definition on first use

  log2timeline/plaso#5360 · Filter by author kev365 opened on Oct 14, 2026
  1

  

• macos GitHub action: openssl4 causes yara build to fail

  dependencytesting
  log2timeline/plaso#5306 · Filter by author joachimmetz opened on Oct 9, 2026
  1

• Add a check to the tagging file loader for rules that are not attached to a label

  log2timeline/plaso#5297 · Filter by author kev365 opened on Oct 3, 2026
  3

  

• Text parser tries other plugins on a file after the selected plugin failed

  needs closer look
  log2timeline/plaso#5293 · Filter by author elhoim opened on Oct 1, 2026 · 2026 December release
  2

  

• Document terminology for different event states/traits/anomalies

  coreparsers
  log2timeline/plaso#5155 · Filter by author joachimmetz opened on Jul 8, 2026
  1

• IIS log parser (iis.py) ignores valid IIS log entries containing characters outside the "URI Safe characters" list - potential fix included

  log2timeline/plaso#5029 · Filter by author J-A-Sec opened on Jan 21, 2026 · 2026 December release
  10

  

• Feature request to have stricter data model and enforcement

  log2timeline/plaso#5016 · Filter by author nflexfo opened on Nov 26, 2025
  6

  

• Add support for Windows Registry Transaction Logs

  enhancementparsers
  Feature

  log2timeline/plaso#4952 · Filter by author elad-levi-cyberark opened on Feb 5, 2025
  1

• Processing a bsdlabel and UFS2 disk image

  blockedcoreenhancement
  Feature

  log2timeline/plaso#4895 · Filter by author Herbert-Karl opened on Aug 8, 2024
  3

• Add support for Hadoop YARN timeline server logs

  enhancementparsers
  Feature

  log2timeline/plaso#4885 · Filter by author sydp opened on May 15, 2024
  1

• Failed to parse bitlocker encrypted image, but success with same image mounted with bdemount

  needs closer look
  log2timeline/plaso#4877 · Filter by author certxlm opened on Apr 16, 2024
  

• Replace Redis with Valkey

  code healthmaintenance
  log2timeline/plaso#4843 · Filter by author joachimmetz opened on Mar 23, 2024

• Windows shim databases produce spurious UTMP events

  log2timeline/plaso#4839 · Filter by author Spferical opened on Mar 21, 2024
  1

• Image export: change default behavior to not export file system metadata files

  enhancementtoolsUX
  log2timeline/plaso#4837 · Filter by author joachimmetz opened on Mar 20, 2024
  

• Windows Event Log message strings support enhancements

  enhancement
  log2timeline/plaso#4822 · Filter by author joachimmetz opened on Mar 2, 2024 · Parking/Temporary release
  2

• Add Apple Biome files (or SEBG files) support

  enhancementparsers
  Feature

  log2timeline/plaso#4812 · Filter by author rick-slin opened on Feb 23, 2024
  10

• Enhance Mac OS background items plist parser plugin

  enhancementparsers
  log2timeline/plaso#4807 · Filter by author joachimmetz opened on Feb 19, 2024

• Add support for signed XML plist files

  enhancementparsers
  Feature

  log2timeline/plaso#4802 · Filter by author joachimmetz opened on Feb 11, 2024

• Python 3.12 DeprecationWarning fork()

  code healthmaintenance
  log2timeline/plaso#4796 · Filter by author joachimmetz opened on Jan 28, 2024
  1