Building a Forensic Timeline Analyzer with The Sleuth Kit

What this does TimeSleuth is a digital forensics tool for reconstructing timelines of system activity from disk images. It has three stages: extracting raw filesystem events using pytsk3 (Python bindi