What it does
Timesketch is an open-source tool for organizing and analyzing forensic timelines with other investigators.
Timesketch addresses the stage where collected events need a shared interpretation. Investigators work in sketches that organize timeline material and collaborative analysis. It is useful when several people need to annotate and discuss the same sequence. Normalize the evidence's time context before comparing events from different systems. Keep the underlying source references with the investigation so a timeline entry can be checked. The project explicitly says it is not an official Google product despite Google's ownership of code.
Strengths
- Collaborative forensic timeline organization
Best for
- Investigators comparing events across evidence sources
Sources
- timesketch (Oct 26, 2026)
- Timesketch LICENSE (Oct 26, 2026)