How to Use Timeline in Magnet AXIOM
With the launch of AXIOM 3.0 we’ve made some major improvements on how examiners can conduct timeline analysis in AXIOM. Previously, examiners who used the Timeline View in AXIOM Examine were limited to only seeing timestamps from artifacts.
With 3.0 we’ve added the ability to analyze all timestamps recovered by AXIOM from both artifacts and the file system. With this change, we’ve moved Timeline from the Views in the Artifacts Explorer to its own explorer beside File System, Artifacts, Registry, etc.