I need some kind of timeline tool. (Windows)

ryanham · 2018-04-08T15:09:55Z

Hello all,I am a new and first post. I just wondering what software are analyzing windows artifacts to correctly and many things by timeline. I've known there are many stuff as we can see vender's product(ADs) of right. But I need parsed data of windows artifacts by timeline.I've used EnCase, FTK and AXIOM before, they are not useful to analyze user activity by timeline for me. (such as Cloud, SNS, E-mail, Shellbag, NTFS[logfile, usnjrnl], jumplist and prefetch(Win10) of windows)Could you show me what software suit for me.Thank you all.

Page 2 / 2 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by kastajamah 6 years ago

12 Posts

9 Users

0 Reactions

3,329 Views

RSS

jaclaz

(@jaclaz)

Illustrious Member

Joined: 18 years ago

Posts: 5133

05/11/2019 3:15 pm

Here is a detailed guide covering the corresponding capabilities of Belkasoft Evidence Center https://belkasoft.com/windows-10-timeline-analysis

And - to be fair - some info from EugeneBelk's progile
https://www.forensicfocus.com/Your_Account/profile=EugeneBelk/

Web Site https://belkasoft.com
Occupation Marketing Manager

jaclaz

ReplyQuote

kastajamah

(@kastajamah)

Estimable Member

Joined: 8 years ago

Posts: 113

06/11/2019 5:06 pm

This looks like a decent program. I have not used this product, but I have used Vound's Intella for email analysis. I have been very happy with it.

https://www.vound-software.com/w4

ReplyQuote

Page 2 / 2 Prev

8 Forums
15.7 K Topics
92.3 K Posts
280 Online
41.1 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed