Kristinn Gudjonsson has written an excellent timeline utility for forensics investigators call log2timeline. The power of his tool is that it will add a wide range of event inline to an existing body file so that when you are doing timeline analysis (a key component to any forensic investigation) you can see file system, [...]
