thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Advanced

Super Timeline

A comprehensive timeline that merges timestamps from many artifact types into one chronological view.

Definition

Plaso's log2timeline parses file systems, event logs, registry, browser history, prefetch and more, outputting a storage file processed by psort into CSV or Timesketch for analysis. Super timelines are large and require filtering around key times.

Example

log2timeline.py --storage-file case.plaso image.E01 then psort.py -o l2tcsv case.plaso

Exam tip

Plaso/log2timeline is the standard super timeline tool.

Related terms