Timesketch

Google's open-source tool for collaborative analysis of forensic timelines. Lets incident responders import timelines (for example from Plaso), search and filter events at scale, tag and annotate findings, and run analyzers and Sigma rules across the data in a shared web interface.