📊 The statistical analysis tool for git repositories
SIFT
❤️ Free batch image & video geolocation digital forensics tool. Automatically extract EXIF data, visualize GPS coordinates on maps, and reconstruct event timelines for OSINT
A simple Streamlit Component to display a Timeline in Streamlit apps. It integrates Knightlab's TimelineJS.
Get-NetScalerTimeline - Automated File System Timeline Creation for NetScaler ADC/Gateway (DFIR)
Inbox Archeology is a local-first tool that analyzes your Gmail Takeout export to reconstruct the social history of your inbox.
LEXIS — from raw extraction to complete analysis and portable-ready case. Multi-device Android & iOS forensics powered by the LEAPPs.
Local-first, forensic-grade log investigation platform: Timesketch-style timeline exploration plus embedding-based and statistical anomaly detection.
DFIR desktop app for investigating and data wrangling.
A PowerShell-based DFIR automation toolkit for orchestrating Windows forensic artifact collection and parsing with Eric Zimmerman tools and other forensic utilities.
A collection of digital forensics lab reports covering Linux artifact recovery, shell history analysis, bash script forensics, and incident reconstruction using tools like SleuthKit, Auditd, and command-line utilities.
Digital Forensics and Incident Response: Investigation, Evidence Preservation, and Timeline Reconstruction;
Digital forensics and incident response (DFIR) reference: evidence handling, memory/disk forensics workflows, and chain-of-custody procedures for enterprise investigations
Local-first digital forensics and rapid evidentiary triage workbench with FastAPI API, interactive web UI, and 50+ artifact collectors.
SOC lab: five weekend alerts closed as false positives, correlated into one timeline with clock-skew correction, confirmed/inferred/unknown labels, and an Escalate decision. TripleTen Cybersecurity Bootcamp (simulated scenario).
Digital forensics timeline reconstruction of a simulated Windows ransomware incident, from initial phishing execution to file encryption, built from synthetic endpoint artifacts.
A fast, cross-artifact Windows forensic timeline correlator in Python. Automatically stitches fragmented telemetry from MFT, SRUM, Shimcache, and BAM to spot timestomping, ghost execution, and account-level activity in one unified timeline.
Windows DFIR investigation reconstructing account activity from Security.evtx, with authentication, credential, discovery, process, browser, timeline, and evidence-integrity analysis.
AI-powered legal evidence processing platform for email ingestion, evidence intelligence, timeline generation, and automated litigation support.
Track the timeline/timestamps of an episode of content such as videos
To associate your repository with the timeline-analysis topic, visit your repo's landing page and select "manage topics."