{"id":2306,"date":"2026-01-06T06:55:28","date_gmt":"2026-01-06T06:55:28","guid":{"rendered":"https:\/\/icmscyber.com\/?page_id=2306"},"modified":"2026-01-15T02:19:19","modified_gmt":"2026-01-15T02:19:19","slug":"timeweave","status":"publish","type":"page","link":"https:\/\/icmscyber.com\/ja\/downloads\/software\/timeweave\/","title":{"rendered":"TimeWeave"},"content":{"rendered":"<div class=\"section-wrapper\" data-id=\"YQDJhB\"><section class=\"wp-block-gutenverse-section guten-element guten-section guten-YQDJhB layout-boxed align-stretch\"><div class=\"guten-container guten-column-gap-default\">\n<div class=\"wp-block-gutenverse-column guten-element guten-column guten-PlN3by\"><div class=\"guten-column-wrapper\" data-id=\"PlN3by\"><\/div><\/div>\n\n\n\n<div class=\"wp-block-gutenverse-column guten-element guten-column guten-YWPuzR\"><div class=\"guten-column-wrapper\" data-id=\"YWPuzR\">\n<div class=\"guten-e33eO5 guten-image-box guten-element style-default\"><div class=\"inner-container\"><div class=\"image-box-header\"><img decoding=\"async\" class=\"gutenverse-image-box-filled\" src=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/TimeWeave_Header.png\" height=\"385\" width=\"613\"\/><\/div><div class=\"image-box-body\"><div class=\"body-inner\"><h3 class=\"body-title icon-position-before\"><span class=\"image-box-icon icon-position-before\"><\/span><span>TimeWeave-Unified Timeline Analysis.<\/span><\/h3><p class=\"body-description\"> <strong>TimeWeave<\/strong> is a visual timeline analysis tool designed to help you understand time\u2011based data by weaving multiple sources into a single, clear, interactive timeline.<br>It is built to be flexible and approachable. Whether you are analysing digital\u2011forensic artefacts, system activity logs, spreadsheets, or financial records, TimeWeave focuses on one core idea:<br><strong>Bring many dates, from many files, together into one unified timeline so patterns, clusters, and anomalies become easy to see.<\/strong><br>You do not need to be technical to use TimeWeave. Most actions are point\u2011and\u2011click, with visual feedback at every step.<\/p><\/div><\/div><\/div><\/div>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-gutenverse-column guten-element guten-column guten-cPPcxI\"><div class=\"guten-column-wrapper\" data-id=\"cPPcxI\"><\/div><\/div>\n<\/div><\/section><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Histogram Overview<\/h2>\n\n\n\n<div class=\"wp-block-media-text is-stacked-on-mobile\"><figure class=\"wp-block-media-text__media\"><img decoding=\"async\" width=\"1024\" height=\"331\" src=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Thread-Stacked-View-1024x331.png\" alt=\"\" class=\"wp-image-2309 size-full\" srcset=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Thread-Stacked-View-1024x331.png 1024w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Thread-Stacked-View-300x97.png 300w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Thread-Stacked-View-768x248.png 768w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Thread-Stacked-View-18x6.png 18w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Thread-Stacked-View.png 1430w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<p><strong>What the Histogram Shows<\/strong><\/p>\n\n\n\n<p>The histogram provides a high\u2011level overview of activity density over time.<\/p>\n\n\n\n<p>Each bar represents:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A time bucket<\/li>\n\n\n\n<li>The number of events in that period<\/li>\n<\/ul>\n\n\n\n<p><strong>Stacked View<\/strong><\/p>\n\n\n\n<p>When multiple threads are active, histogram bars are stacked by thread colour.<\/p>\n\n\n\n<p>This allows you to quickly see:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Which source dominates a time period<\/li>\n\n\n\n<li>Overlaps between datasets<\/li>\n<\/ul>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-media-text is-stacked-on-mobile\"><figure class=\"wp-block-media-text__media\"><img decoding=\"async\" width=\"1024\" height=\"344\" src=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Stacked-View-by-Event-Type-1024x344.png\" alt=\"\" class=\"wp-image-2311 size-full\" srcset=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Stacked-View-by-Event-Type-1024x344.png 1024w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Stacked-View-by-Event-Type-300x101.png 300w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Stacked-View-by-Event-Type-768x258.png 768w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Stacked-View-by-Event-Type-18x6.png 18w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Stacked-View-by-Event-Type.png 1430w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<p><strong>Stacked View by Event Type (Single Thread)<\/strong><\/p>\n\n\n\n<p>When only one thread is loaded, TimeWeave can switch the histogram into a different stacked mode.<\/p>\n\n\n\n<p>Instead of stacking by thread, the histogram can be stacked by event type within that single dataset.<\/p>\n\n\n\n<p>In this mode:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Each colour segment represents a different timestamp or event type (for example: Created, Modified, Accessed)<\/li>\n\n\n\n<li>The total height of the bar still represents overall activity<\/li>\n\n\n\n<li>The internal stack shows <em>what kind<\/em> of events contributed to that activity<\/li>\n<\/ul>\n\n\n\n<p>This is especially useful when analysing datasets that contain multiple timestamps per record, such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>File system artefacts<\/li>\n\n\n\n<li>Log entries with several date fields<\/li>\n\n\n\n<li>Financial or transactional records with multiple lifecycle dates<\/li>\n<\/ul>\n\n\n\n<p>Stacking by event type allows you to:<\/p>\n\n\n\n<p>Identify unusual patterns (for example, many modifications without corresponding creations)<\/p>\n\n\n\n<p>See which timestamp type dominates certain periods<\/p>\n\n\n\n<p>Compare lifecycle behaviour over time<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-media-text is-stacked-on-mobile\"><figure class=\"wp-block-media-text__media\"><img decoding=\"async\" width=\"1024\" height=\"328\" src=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Zoom-in-histogram-1024x328.png\" alt=\"\" class=\"wp-image-2314 size-full\" srcset=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Zoom-in-histogram-1024x328.png 1024w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Zoom-in-histogram-300x96.png 300w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Zoom-in-histogram-768x246.png 768w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Zoom-in-histogram-18x6.png 18w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Zoom-in-histogram.png 1430w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<p><strong>Zooming with the Histogram<\/strong><\/p>\n\n\n\n<p>You can:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Click and drag across the histogram<\/li>\n\n\n\n<li>Zoom the timeline to a specific time range<\/li>\n<\/ul>\n\n\n\n<p>This is useful for focusing on periods of interest.<\/p>\n\n\n\n<div class=\"guten-element guten-spacer guten-ZgS6Pg\"><\/div>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-media-text is-stacked-on-mobile\"><figure class=\"wp-block-media-text__media\"><img decoding=\"async\" width=\"1024\" height=\"330\" src=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Histogram-Filtering-1024x330.png\" alt=\"\" class=\"wp-image-2315 size-full\" srcset=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Histogram-Filtering-1024x330.png 1024w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Histogram-Filtering-300x97.png 300w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Histogram-Filtering-768x248.png 768w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Histogram-Filtering-18x6.png 18w, https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/Histogram-Filtering.png 1430w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<p><strong>Filtering &amp; Focus<\/strong><\/p>\n\n\n\n<p><strong>Thread Filtering<\/strong><\/p>\n\n\n\n<p>Each thread can be:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Enabled or disabled<\/li>\n\n\n\n<li>Highlighted via legend interaction<\/li>\n<\/ul>\n\n\n\n<p>This helps reduce noise when working with many datasets.<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"guten-element guten-spacer guten-AYaRNU\"><\/div>\n\n\n\n<div class=\"guten-element guten-button-wrapper guten-CT4P7E\"><a class=\"guten-button guten-button-success guten-button-sm\" href=\"https:\/\/icmscyber.com\/wp-content\/uploads\/2026\/01\/TimeWeave-v1.0.0.zip\"><span>Download TimeWeave v1.0.0<\/span><\/a><\/div>\n\n\n\n<div class=\"guten-element guten-spacer guten-OeGJ2v\"><\/div>","protected":false},"excerpt":{"rendered":"<p>Histogram Overview<\/p>","protected":false},"author":2,"featured_media":0,"parent":2297,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"class_list":["post-2306","page","type-page","status-publish","hentry"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/icmscyber.com\/ja\/wp-json\/wp\/v2\/pages\/2306","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icmscyber.com\/ja\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/icmscyber.com\/ja\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/icmscyber.com\/ja\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/icmscyber.com\/ja\/wp-json\/wp\/v2\/comments?post=2306"}],"version-history":[{"count":1,"href":"https:\/\/icmscyber.com\/ja\/wp-json\/wp\/v2\/pages\/2306\/revisions"}],"predecessor-version":[{"id":2507,"href":"https:\/\/icmscyber.com\/ja\/wp-json\/wp\/v2\/pages\/2306\/revisions\/2507"}],"up":[{"embeddable":true,"href":"https:\/\/icmscyber.com\/ja\/wp-json\/wp\/v2\/pages\/2297"}],"wp:attachment":[{"href":"https:\/\/icmscyber.com\/ja\/wp-json\/wp\/v2\/media?parent=2306"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}