search

google / timesketch

Collaborative forensic timeline analysis
Apache License 2.0
2.62k stars 589 forks source link

Gant chart visualisation #728

Open markrey opened 5 years ago

markrey commented 5 years ago

Feature request :

Currently there are two charts for showing events:

timeline

One of the very good chart would be Trace Chart - For example OpenTracing type chart

image

For example: This chart allows users to quickly check the journey of the attack (in our usecase). We take one email address as reference and see when they logged in successfully from which PC to how many times a user failed login across multiple PCs.

Thank you

berggren commented 5 years ago

Yes, this is a great idea! I have been thinking about something similar. Essentially we want some sort of Gant chart.

berggren commented 1 year ago

Assigning to @sydp who is working on the viz in the new UI

sydp commented 2 months ago

The trace chart can probably be implemented using the Apex rangeBar and an aggregator that gets the min-max timestamp for top-n terms.