Search Results for "evidence"

Timesketch is a collaborative forensic timeline analysis platform used to investigate security incidents by turning diverse evidence into a single, searchable chronology. Analysts ingest logs and artifacts from many sources—endpoints, servers, cloud services—and Timesketch normalizes them into events on a unified timeline. Powerful search, aggregations, and saved views help you pivot quickly, highlight anomalies, and preserve investigative steps for later review.

This is a part of the Ice Coral project. The WorkLog is focused on evidence of device servicing. It's good for service teams to share information about done work. For more information visit Ice Coral - WorkLog Web Site link below.

This is a part of the Ice Coral project. The TimeSpan is focused on event evidence, for example scheduled tasks (Windows Task Scheduler, crond). For more info visit Ice Coral - TimeSpan Web Site.

Ice Coral is intended to take place as Information System for InfraStructure (ISIS). This project should be central information evidence about your network infrastructure. It's planned as modular system, so you can use only one part of this system (eg. WorkLog), if you want. For more info visit Ice Coral (project) Web Site link below.