<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>IR and forensic talk &#187; timeline</title>
	<atom:link href="http://blog.kiddaland.net/tag/timeline/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.kiddaland.net</link>
	<description>Some useless talk mixed with hopefully interesting points every now and then</description>
	<lastBuildDate>Fri, 27 Aug 2010 09:49:44 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Timeline analysis, links and discussion</title>
		<link>http://blog.kiddaland.net/2010/03/timeline-analysis-links-and-discussion/</link>
		<comments>http://blog.kiddaland.net/2010/03/timeline-analysis-links-and-discussion/#comments</comments>
		<pubDate>Mon, 22 Mar 2010 23:04:38 +0000</pubDate>
		<dc:creator>kiddi</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Timeline analysis]]></category>
		<category><![CDATA[log2timeline]]></category>
		<category><![CDATA[super timeline]]></category>
		<category><![CDATA[timeline]]></category>

		<guid isPermaLink="false">http://blog.kiddaland.net/?p=230</guid>
		<description><![CDATA[Timeline analysis has been getting a lot of press lately.  Harlan discussed some of the sources and usability of timeline analysis in a recent blog post. And then you&#8217;ve got few posts that describe how to create timelines, both from a live Windows machine, and from registry files. Rob Lee also posted a blog about [...]]]></description>
		<wfw:commentRss>http://blog.kiddaland.net/2010/03/timeline-analysis-links-and-discussion/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>log2timeline, artifact timeline analysis &#8211; Part I</title>
		<link>http://blog.kiddaland.net/2009/08/log2timeline-artifact-timeline-analysis-part-i/</link>
		<comments>http://blog.kiddaland.net/2009/08/log2timeline-artifact-timeline-analysis-part-i/#comments</comments>
		<pubDate>Sat, 01 Aug 2009 09:11:24 +0000</pubDate>
		<dc:creator>kiddi</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Network Analysis]]></category>
		<category><![CDATA[Timeline analysis]]></category>
		<category><![CDATA[Windows Analysis]]></category>
		<category><![CDATA[artifact analysis]]></category>
		<category><![CDATA[artifacts]]></category>
		<category><![CDATA[body file]]></category>
		<category><![CDATA[log2timeline]]></category>
		<category><![CDATA[mactime]]></category>
		<category><![CDATA[timeline]]></category>

		<guid isPermaLink="false">http://blog.kiddaland.net/?p=70</guid>
		<description><![CDATA[Update 1 Updated one command (according to a comment) and text regarding availability of comparable tools updated according to a post that I just posted on the SANS forensic blog &#160; Timeline analysis can be extremely useful during any investigation.  Although traditional file system timeline can be very helpful it sometimes misses important events that [...]]]></description>
		<wfw:commentRss>http://blog.kiddaland.net/2009/08/log2timeline-artifact-timeline-analysis-part-i/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>log2timeline</title>
		<link>http://blog.kiddaland.net/2009/07/log2timeline/</link>
		<comments>http://blog.kiddaland.net/2009/07/log2timeline/#comments</comments>
		<pubDate>Fri, 31 Jul 2009 14:18:47 +0000</pubDate>
		<dc:creator>kiddi</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Timeline analysis]]></category>
		<category><![CDATA[log2timeline]]></category>
		<category><![CDATA[timeline]]></category>

		<guid isPermaLink="false">http://blog.kiddaland.net/?p=76</guid>
		<description><![CDATA[I haven&#8217;t had a time to publish a blog for a while but I wanted to let people know of the new tool I just wrote (still a Beta release), log2timeline. This is a collection of Perl scripts (with one front-end) that parse different log files and artifacts (mostly Windows artifacts for now) to create [...]]]></description>
		<wfw:commentRss>http://blog.kiddaland.net/2009/07/log2timeline/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
