Timesketch
DFIR · Advanced
Collaborative timeline analysis UI.
Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.
What to learn
- Sketches
- Sigma rules
Example commands (lab VMs only)
- Import Plaso timelineCollaborative review