https://github.com/google/timesketch

Collaborative forensic timeline analysis
https://github.com/google/timesketch

analysis dfir forensics security timeline

Last synced: 21 days ago
JSON representation

Collaborative forensic timeline analysis

• Host: GitHub
• URL: https://github.com/google/timesketch
• Owner: google
• License: apache-2.0
• Created: 2014-06-19T17:49:45.000Z (almost 12 years ago)
• Default Branch: master
• Last Pushed: 2026-03-09T12:09:14.000Z (23 days ago)
• Last Synced: 2026-03-09T18:20:55.404Z (23 days ago)
• Topics: analysis, dfir, forensics, security, timeline
• Language: Python
• Homepage:
• Size: 206 MB
• Stars: 3,282
• Watchers: 127
• Forks: 646
• Open Issues: 205
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Authors: AUTHORS

Awesome Lists containing this project

• awesome-incident-response - Timesketch - Open source tool for collaborative forensic timeline analysis. (IR Tools Collection / Timeline Tools)
• ForensicsTools - timesketch - Collaborative forensic timeline analysis (Challenges / Timeline Analysis)
• Awesome-Forensics - timesketch - Collaborative forensic timeline analysis (Tools / Timeline Analysis)
• awesome-flask - Timesketch - Collaborative forensic timeline analysis. (Projects / Open Source Projects)
• awesome-csirt - timesketch
• awesome-lists - Timeline TimeSketch
• fucking-awesome-incident-response - Timesketch - Open source tool for collaborative forensic timeline analysis. (IR Tools Collection / Timeline Tools)
• awesome-rainmana - google/timesketch - Collaborative forensic timeline analysis (Python)
• awesome-flask - timesketch - Collaborative forensics timeline analysis (Built with Flask)
• awesome-flask - timesketch - Collaborative forensics timeline analysis (Built with Flask)
• awesome-flask-cn - timesketch - Collaborative forensics timeline analysis (介绍)
• awesome-forensics - **1227**星
• awesome-hacking-lists - google/timesketch - Collaborative forensic timeline analysis (Python)
• awesome-forensics - timesketch - Collaborative forensic timeline analysis (Tools / Timeline Analysis)
• awesome-incident-response - Timesketch - Open source tool for collaborative forensic timeline analysis. (IR tools Collection / Timeline tools)
• my-awesome-starred - timesketch - Collaborative forensics timeline analysis (Python)
• awesome-flask - timesketch - Collaborative forensics timeline analysis (Built with Flask)

README

          
# Timesketch

[![Version](https://img.shields.io/pypi/v/timesketch?label=timesketch&style=plastic)](https://pypi.python.org/pypi/timesketch)

[![Version API](https://img.shields.io/pypi/v/timesketch_api_client?label=api_client&style=plastic)](https://pypi.python.org/pypi/timesketch_api_client)

[![Version Import](https://img.shields.io/pypi/v/timesketch_import_client?label=import_client&style=plastic)](https://pypi.python.org/pypi/timesketch_import_client)

![](https://github.com/google/timesketch/workflows/timesketch-end-to-end/badge.svg)

![](https://github.com/google/timesketch/workflows/pipenv%20unittests/badge.svg)

![](https://github.com/google/timesketch/workflows/ppa%20unittests/badge.svg)

## Table of Contents

1. [About Timesketch](#about-timesketch)

2. [Getting started](#getting-started)

3. [Community](#community)

4. [Contributing](#contributing)

## About Timesketch

Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at the same time.  Add meaning to your raw data with rich annotations, comments, tags and stars.

![Timesketch Start Exploring Screen](https://github.com/user-attachments/assets/79c98c71-df41-4388-b288-40eb9c7f3b5a)

![Timesketch Timeline View](https://github.com/user-attachments/assets/d2d6f354-884c-42f5-be8f-bf97f6f88c5d)



## Getting started

#### Installation

* [Install Timesketch](https://timesketch.org/guides/admin/install/)

#### Adding timelines

* [Upload data](https://timesketch.org/guides/user/upload-data/)

#### Using Timesketch

* [Users guide](https://timesketch.org/guides/user/basic-concepts/)

#### Adding a Notebook Container

* [Installation](https://timesketch.org/guides/user/notebook/)

## Community

* [Community guide](https://timesketch.org/community/resources/)

## Contributing

* [Prerequisites](CONTRIBUTING.md)

* [Developers guide](https://timesketch.org/developers/getting-started/)

---

##### Obligatory Fine Print

This is not an official Google product (experimental or otherwise), it is just code that happens to be owned by Google.