Hi James,
I have updated timeliner to work with the new OpenPyxl API. Just for
reference, my install is from [1]. In addition to this, I have also
added xlsx output as a renderer for the unified output [2]. So you
should be able to get xlsx output from any plugin that has already been
converted. You can see which plugins have this support by using the
--help/-h switch. For example:
$ python vol.py -f mem.img pslist --help
[snip]
Module Output Options: dot, html, json, quicktext, sqlite, text, xlsx
[snip]
$ python vol.py -f mem.img pslist --output=xlsx --output-file=pslist.xlsx
All the best,
-Jamie
[1]
https://pypi.python.org/pypi/openpyxl
[2]
https://github.com/volatilityfoundation/volatility/commit/c4a9a732c9411e7b0…
On 12/19/14 7:40 AM, James Lay wrote:
On Fri, 2014-12-19 at 03:01 +0000, Jamie Levy wrote:
OpenPyxl just changed their API and it is no
longer compatible. I am in the process of fixing the timeliner plugin to use the new API.
Also, the excel output for psxview has already been converted to the new API.
All the best,
-Jamie
------Original Message------
From: James Lay
Sender: vol-users-bounces(a)volatilityfoundation.org
<mailto:vol-users-bounces@volatilityfoundation.org>
To: Volatility
ReplyTo: jlay(a)slave-tothe-box.net <mailto:jlay@slave-tothe-box.net>
Subject: [Vol-users] Trick to getting xlsx output
Sent: Dec 18, 2014 6:27 PM
Hey all,
Using 2.4...not able to get xlsx output...greeted with:
Volatility Foundation Volatility Framework 2.4
ERROR : volatility.plugins.timeliner: You must install OpenPyxl for
xlsx format:
https://bitbucket.org/ericgazoni/openpyxl/wiki/Home
My install method for volatility was download, extract, move to
/opt/volatility, and python vol.py from there.
My install method for openpyxl was:
hg clone
https://bitbucket.org/openpyxl/openpyxl
cd openpyxl
python setup.py build
sudo python setup.py install
Is there anything else I need to check? I see a slew of items in:
/usr/local/lib/python2.7/dist-packages/openpyxl-2.1.4-py2.7.egg/
Thank you.
James
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org <mailto:Vol-users@volatilityfoundation.org>
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
Awesome....looking forward to it...thank you.
James
--
Jamie Levy (@gleeda)
Blog:
http://volatility-labs.blogspot.com/
GPG:
http://pgp.mit.edu/pks/lookup?op=get&search=0x196B2AB527A4AC92
Fingerprint: 2E87 17A1 EC10 1E3E 11D3 64C2 196B 2AB5 27A4 AC92