<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Recent changes to recorded events</title><link>https://sourceforge.net/p/catdetect/wiki/recorded%2520events/</link><description>Recent changes to recorded events</description><atom:link href="https://sourceforge.net/p/catdetect/wiki/recorded%20events/feed" rel="self"/><language>en</language><lastBuildDate>Wed, 11 Apr 2012 16:10:03 -0000</lastBuildDate><atom:link href="https://sourceforge.net/p/catdetect/wiki/recorded%20events/feed" rel="self" type="application/rss+xml"/><item><title>WikiPage recorded events modified by Andrew Marrington</title><link>https://sourceforge.net/p/catdetect/wiki/recorded%2520events/</link><description>Recorded events are sourced from logs which have been identified in the case.

The tool **log2timeline** (&lt;http://www.log2timeline.net&gt;) is capable of recursively searching through a mounted image file, identifying various log formats it supports, and parsing their contents into a CSV format.

A nice project might be to add an output format to log2timeline which would give output into the normalised format used by CAT Detect.

In the meantime, the output of log2timeline can be manually converted into the necessary format and loaded into a database using CAT Detect's built in tool.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Andrew Marrington</dc:creator><pubDate>Wed, 11 Apr 2012 16:10:03 -0000</pubDate><guid>https://sourceforge.net80cb7e802b833483dcd07cd8b2a32350c41186aa</guid></item></channel></rss>