OSForensics™ features a built-in Timeline Viewer for e-discovery functions. The Timeline View provides a visual representation of file and system activity over time, helping you to identify date ranges where significant activity has occured, or build up a pattern of behaviour over years, months or days.
Features
The OSForensics Timeline viewer is an interactive bar graph displaying system activity such as file creation dates, web browsing history, cookies, USB records and MRU records over time.
The granularity of the timescale on the Timeline Viewer can be adjusted from years to months to days by clicking on the relevant bar in the viewer. Hovering over the timeline with your cursor provides a count of all events in that time period.
