Skip to content

Timeline analysis

Timeline formats


Articles / Blogposts



  • ThemeRiver: In Search of Trends, Patterns, and Relationships, by Susan Havre, Beth Hetzler, and Lucy Nowell, Battelle Pacific Northwest Division, Richland, Washington, 1999
  • Visualizing gaps in time-based lists, by Moritz Stefaner, November 6, 2000


log2timeline - An artifact timeline creation and analysis framework. Log2timeline has been superseded by Plaso.

Plaso - (Plaso Langar Að Safna Öllu), or super timeline all the things, is a Python-based engine used by several tools for automatic creation of timelines. Plaso default behavior is to create super timelines but it also supports creating more targeted timelines.

Simile Timeline and Timeplot

sorter - The Sleuth Kit's mactime sorting program.

TimeFlow - Visual timelines for investigation - source freely available

Timesketch - tool for collaborative forensic timeline analysis

Zeitline - Forensic timeline editor