Forensic Timeline
A time-ordered reconstruction of relevant filesystem, operating-system, application, and user events used to analyze activity and sequence of actions.
Related Concepts
- Master File Table
- USN Journal
- Chain of Custody
- Timeline Analysis