Timeline2GUI: A Log2Timeline CSV parser and training scenarios

Détails

ID Serval
serval:BIB_FB1028C40CCC
Type
Article: article d'un périodique ou d'un magazine.
Collection
Publications
Titre
Timeline2GUI: A Log2Timeline CSV parser and training scenarios
Périodique
Digital Investigation
Auteur(s)
Debinski Mark, Breitinger Frank, Mohan Parvathy
ISSN
1742-2876
Statut éditorial
Publié
Date de publication
03/2019
Volume
28
Pages
34-43
Langue
anglais
Résumé
Crimes involving digital evidence are getting more complex due to the increasing storage capacities and utilization of devices. Event reconstruction (i.e., understanding the timeline) is an essential step for investigators to understand a case where a prominent tool is Log2Timeline (a tool that creates super timelines which is a combination of several log files and events throughout a system). While these timelines provide great evidence and help to understand a case, they are complex and require tools as well as training scenarios. In this paper we present Timeline2GUI an easy-to-use python implementation to analyze CSV log files create by Log2Timeline. Additionally, we present three training scenarios – beginner, intermediate and advanced – to practice timeline analysis skills as well as familiarity with visualization tools. Lastly, we provide a comprehensive overview of tools.
Mots-clé
Law, Medical Laboratory Technology, Computer Science Applications
Web of science
Création de la notice
06/05/2021 11:01
Dernière modification de la notice
06/05/2021 11:37
Données d'usage