Client-side only

Investigation Timeline

Build an incident story like Git: continue on the main line or branch from any event.

Timeline View Timeline Direction Ambiguous Date Style Import JSON

No events yet

Start from oldest or latest and branch whenever the investigation splits.

0 indicators tracked

IOC Type IOC Value Notes Link to Event (optional)

Add Event

Branch Event Title Timestamp Details Add IOCs while creating event (optional)

Create Branch

Branch Name Create first event in this branch now