Computer Forensic Timeline Analysis with Tapestry

by Derek Edwards
Sept. 1, 2017 0 comments SANS Institute forensics

One question commonly asked of investigators and incident responders is, “What happened?” The answer often takes the form of a story designed to convey understanding of complex mechanisms and interactions in a simple, straightforward way. One of the simplest and most intuitive ways to organize a story is chronologically

https://www.sans.org/reading-room/whitepapers/forensics/computer-forensic-timeline-analysis-tapes...