Timeline analysis is an important step when conducting forensic investigations. However, research on timeline analysis usually pertains to digital devices, such as computers or smartphones, but not drones. In addition, existing forensic tools only consider timelines extracted from file metadata in drones. In this paper, we propose to construct a forensic timeline from a drone device. The timeline is displayed by its sources, specifically micro, macro, and super timeline. Our proposed tool can display these three types of timelines to assist investigators in analyzing a drone's forensic timeline.
- Drone forensics
- Forensic timeline