Created attachment 462174 [details]
This is ebuild which I have prepared for Avidata Odzyskiwanie Danych (my polish data recovery company). It is modified very old version (1.2.0) plaso from spike overlay. Generally I added new packages requirements and new packages versions requirements.
Joachim Metz (author of this project) often removes old "experimental" versions from github, so RESTRICT="mirror" might fail after some time (be warned), but now it is only one solution to automatic download sources.
It was checked on x86 and amd64 architecture, but it is "keyworded" as it is only proposition of ebuild. It works with new version of libewf signed as 20160424. Ebuild for this version of libewf library is solution of bug: https://bugs.gentoo.org/show_bug.cgi?id=547418