Belkasoft X Help Contents

Timeline

On the Timeline tab, Belkasoft X combines all the artifacts with date/time stamps—such as chats, emails, documents, and pictures—from a case and presents them together. Here, you can examine all events, which were happening at a given date or time on a device.

Some artifacts may appear twice on the Timeline tab—for example, a file-based artifact, such as a document, from different operating system times and with different Created or Last Access timestamps. Similarly, artifacts with metadata, such as a picture, may have several events recorded in it—for example, GPS time for shot or Date/time digitized. The described artifacts will appear with separate lines on the Timeline.