Would it be great to have a feature in FTK to build an automatic timeline based on MAC dates for files, OS event log entries, internet history and email messages activity all in a single timeline with filter capabilities, for specific timeframes (Hours, days, weeks, months, years, etc.)
Very similar to what Autopsy does
Is it possible to build that feature in FTK?
Thanks in advance
Hector Cuchilla