Timeline View

View a visual representation of the distribution of system activity over time.

OSForensics™ features a built-in Timeline Viewer for e-discovery functions. The Timeline View provides a visual representation of file and system activity over time, helping you to identify date ranges where significant activity has occured, or build up a pattern of behaviour over years, months or days.


The OSForensics Timeline viewer is an interactive bar graph displaying system activity such as file creation dates, web browsing history, cookies, USB records and MRU records over time.

View a timeline of system activity including file creation dates, web browsing, cookies and MRU records!

The granularity of the timescale on the Timeline Viewer can be adjusted from years to months to days by clicking on the relevant bar in the viewer. Hovering over the timeline with your cursor provides a count of all events in that time period.

Conference banner