ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Timeline Analysis"

From ForensicsWiki
Jump to: navigation, search
(Papers)
(Programs)
Line 37: Line 37:
  
 
; [[PTK]] has a timeline analysis tool.
 
; [[PTK]] has a timeline analysis tool.
 +
 +
; [[Aftertime]] - Java based application for creating timelines
 +
: http://www.holmes.nl/NFIlabs/Aftertime/index.html
  
 
==See Also==
 
==See Also==

Revision as of 05:24, 16 April 2010

Papers

Programs

Zeitline — Forensic timeline editor
http://projects.cerias.purdue.edu/forensics/timeline.php
http://sourceforge.net/projects/zeitline/
log2timeline - An artifact timeline creation and analysis framework
http://log2timeline.net
https://blogs.sans.org/computer-forensics/2009/08/13/artifact-timeline-creation-and-analysis-tool-release-log2timeline/
https://blogs.sans.org/computer-forensics/2009/08/14/artifact-timeline-creation-and-analysis-part-2/
sorterSleuthkit's MAC times sorting program.
Simile Timeline and Timeplot
PTK has a timeline analysis tool.
Aftertime - Java based application for creating timelines
http://www.holmes.nl/NFIlabs/Aftertime/index.html

See Also