Results for “forensic-timeline”

Build collaborative forensic incident timelines using Timesketch to ingest, normalize, and analyze multi-source event data for attack chain reconstruction and investigation documentation.

Parse Windows LNK shortcut files to extract target paths, timestamps, volume information, and machine identifiers for forensic timeline reconstruction.

Perform comprehensive forensic analysis of disk images using Autopsy to recover files, examine artifacts, and build investigation timelines.

Parse Windows forensic artifacts including registry, prefetch, shellbags, MFT, and event logs using Eric Zimmerman's tools and analyze results in Timeline Explorer.

Parse Windows Prefetch files to determine program execution history including run counts, timestamps, and referenced files for forensic investigation.

Collect volatile forensic evidence from a compromised system following order of volatility, preserving memory, network connections, processes, and system state before they are lost.

**Server Logs:**

Conducts digital forensics investigations on compromised endpoints, including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction for incident response and evidence collection.

Extract and analyze Chromium-based browser artifacts using Hindsight to reconstruct user web activity for forensic investigations.

Detect processed data produced with old/buggy KINTSUGI code via timestamp forensics

Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility and related tools. Use when analyzing memory dumps, investigating incidents, or performing malware analysis from RAM captures.

Conducts digital forensics investigations following a personal data breach, covering evidence preservation, chain of custody documentation, log analysis, scope determination, and root cause analysis. References industry-standard tools including Splunk, ELK Stack, and Wireshark. Provides forensic workflow from initial evidence collection through final investigation report. Keywords: digital forensics, breach investigation, evidence preservation, chain of custody, root cause analysis, Splunk, ELK, Wireshark.

Detect timing side channels in cryptographic code using formal, symbolic, dynamic, and statistical testing tools.

Analyze Linux system logs including auth.log, syslog, systemd journal, and auditd to reconstruct user activity, detect unauthorized access, and establish event timelines on compromised systems.

Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestamps in the MFT using analyzeMFT and Python.

Generates a comprehensive narrative report analyzing a project's entire development history from claude-mem's persistent memory timeline.

Use when planning a USENIX FAST project timeline from venue fit through choosing a Spring or Fall deadline, double-blind submission, the author-response period, shepherding or a one-shot revision, artifact evaluation, and the open-access camera-ready, with backward-planning offsets tuned to storage evaluation and honest handling of the two-deadline cycle.

Recover deleted records, analyze freelist pages, WAL files, and unallocated space in SQLite databases for digital forensics and incident response.

Extract and analyze browser history, cookies, cache, downloads, and bookmarks from Chrome, Firefox, and Edge for forensic evidence of user web activity.

A component for displaying a timeline of events with customizable items, icons, and layout options including horizontal and vertical orientations.

Converte intimacoes, decisoes, despachos e atas de audiencia numa linha do tempo do processo e numa agenda de providencias com prazos. Le o ato, extrai deliberacoes, identifica o que precisa ser feito e ate quando, e atualiza a memoria do caso. Use quando o operador colar uma intimacao/decisao/ata, disser monta a cronologia, quais as providencias, o que tenho que fazer, agenda do processo, ou organizar o caso.

Use to reconstruct what actually happened to one customer across every conversation, channel and handoff, for an escalation, complaint, post-mortem or goodwill decision. Trigger for "build a timeline for this customer", "what happened on this case", "summarize the back-and-forth before I decide", "when were they first told", escalation summaries, complaint investigations, or a case spanning several tickets.

Show agent flow trace timeline and summary

Hunt for threats in Windows Event Logs using Chainsaw, a fast Rust-based forensic tool that runs Sigma rules, keyword searches, and artifact analysis offline.

Query AWS CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs with Athena for forensic investigation of security incidents.

Extract and analyze Windows Registry hives to uncover user activity, installed software, autostart entries, and evidence of system compromise.

Bereitet Jurastudierende auf Rechtsgeschichte vor: prüft Fristen, Form, Zuständigkeit und Rechtsweg, liefert eine Fristen- und Risikoampel mit Sofortmaßnahmen.

Erstellt aus Sachverhalt, Norm, Beweis und Antrag eine prozessrechtliche Chronologie mit Belegmatrix und Widerspruchsliste.

Prüft Frist, Form, Zuständigkeit, Rechtsweg und Sofortmaßnahmen für Matter Files und Aktenstruktur in Corporate-Kanzleien; liefert eine Fristen- und Risikoampel mit Sofortschritten.

Temporal Data