Timesketch
Table of Contents
About Timesketch
Timesketch is an open source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at the same time. Add meaning to your raw data with rich annotations, comments, tags and stars.
Getting started
Installation
Adding timelines
- Create timeline from JSON/JSONL/CSV file
- Create timeline from Plaso file
- Enable Plaso upload via HTTP
- Use the API client to upload data
- Import other data
Using Timesketch
Community
Contributing
Obligatory Fine Print
This is not an official Google product (experimental or otherwise), it is just code that happens to be owned by Google.