Chrome Logs Events and Protobuf Parser
Details in blog post here: https://abrignoni.blogspot.com/2021/05/cleapp-it-chromeos-logs-events-and.html
Python 3.9 or above (older versions of 3.x will also work with the exception of one or two modules)
Dependencies for your python environment are listed in requirements.txt
. Install them using the below command. Ensure the py
part is correct for your environment, eg py
, python
, or python3
, etc.
py -m pip install -r requirements.txt
or
pip3 install -r requirements.txt
To run on Linux, you will also need to install tkinter
separately like so:
sudo apt-get install python3-tk
To install dependencies offline Troy Schnack has a neat process here: https://twitter.com/TroySchnack/status/1266085323651444736?s=19
$ python cleapp.py -t <zip | tar | fs | gz | tgz> -i <path_to_extraction> -o <path_for_report_output>
$ python cleappGUI.py
$ python cleapp.py --help
This tool is the result of a collaborative effort of many people in the DFIR community.