Skip to content

Glossary: Logs and Data Sources for Investigations

Timeline

Also written: incident timeline

All the events of an incident from every source, converted to one time zone and sorted into a single ordered list. Alex's timeline put the shop breach on one page for the insurer and legal.

Where the book teaches it

Related terms

NormalizationCorrelationLog parsing