Skip to content
Timelineparser

Series

Windows Timeline compared

2 posts in this series. Read them in order or jump to any one.

  1. Windows Timeline vs SRUM vs Prefetch vs Jump Lists

    Windows Timeline, SRUM, Prefetch and Jump Lists compared: what each records, where it lives, how long it lasts and which question each one answers best.

  2. ActivitiesCache.db Parsers Compared: WxTCmd and More

    A fair comparison of Windows Timeline parsers: WxTCmd, kacos2000's tools, Plaso, Velociraptor, SQL queries and this browser parser, including WAL handling.

All posts in this series

Windows Timeline vs SRUM vs Prefetch vs Jump Lists
Windows Timeline, SRUM, Prefetch and Jump Lists compared: what each records, where it lives, how long it lasts and which question each one answers best.
windows-timelinecomparisonprogram-executiondfir
ActivitiesCache.db Parsers Compared: WxTCmd and More
A fair comparison of Windows Timeline parsers: WxTCmd, kacos2000's tools, Plaso, Velociraptor, SQL queries and this browser parser, including WAL handling.
windows-timelineactivitiescachetoolscomparison