Linux Logs Events Application Program Parser
Python 3.9 or above (older versions of 3.x will also work with the exception of one or two modules)
Dependencies for your python environment are listed in requirements.txt. Install them using the below command. Ensure the py part is correct for your environment, eg py, python, or python3, etc.
py -m pip install -r requirements.txt
or
pip3 install -r requirements.txt
To run on Linux, you will also need to install tkinter separately like so:
sudo apt-get install python3-tk
To install dependencies offline Troy Schnack has a neat process here: https://twitter.com/TroySchnack/status/1266085323651444736?s=19
$ python lleapp.py -t <zip | tar | fs | gz | tgz> -i <path_to_extraction> -o <path_for_report_output>
$ python lleappGUI.py
$ python lleapp.py --help
This tool is the result of a collaborative effort of many people in the DFIR community.