timesketch
https://github.com/google/timesketch
Python
Collaborative forensic timeline analysis
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported2 Subscribers
Add a CodeTriage badge to timesketch
Help out
- Issues
- [medium] Aggregate timeline status so analyzers wait for all datasources 🤖🤖🤖
- [medium] Fail CSV/JSONL datasource on invalid mapping file instead of hanging 🤖🤖🤖
- fix: persist analyzer initialization failures
- Fix IDOR: validate parent SearchHistory belongs to the sketch
- Add AnonRouter LLM provider 🤖🤖🤖
- Fix log analyzer provider contract mismatches 🤖🤖🤖
- fix: map __ts_timeline_id to timeline name in to_pandas
- CSV/JSONL import: field-mapping limit is under-counted, and a timeline can report "ready" with zero events 🤖🤖🤖
- LLM log analyzer: the documented provider contract does not match the code in three places 🤖🤖🤖
- Support PPL and SQL queries within Timesketch
- Docs
- Python not yet supported