google/timesketch

Health v2 · maintenance only

Adoption not part of the score

3396 stars · 660 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Timesketch is an open-source web application for collaborative forensic timeline analysis, developed by Google. It lets DFIR investigators organize, search, and annotate event timelines together in shared sketches.

Use cases

• analyze forensic timelines from multiple data sources
• collaborate with a team on incident response investigations
• tag and annotate events in security timelines
• search large event datasets during DFIR investigations
• share investigation timelines with collaborators

When to choose

• you need a collaborative tool for digital forensics and incident response timeline analysis
• you want to organize, search, and annotate large event timelines with a team
• you need a self-hosted, open-source alternative for forensic timeline review

When to avoid

• you need a simple single-user log viewer without collaboration features
• you are not doing forensic or security timeline analysis
• you cannot run a self-hosted server with a search backend

Facets

application · maturity active

search-engine analytics data-visualization security security developer-tools analytics self-hosted python dfir forensics timeline-analysis incident-response collaboration linux docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="google/timesketch")