Timeline

After processing is completed a SQLite database containing parsed timestamped will be located in the _Timeline folder within the generated report directory.

_Timeline folder:

The SQLite database provides an easy way to look at artifacts contextually through time. Using SQL it is trivial to produce queries that filter by time or category as needed.