Computer forensics requires applying computer science to answer legal questions. Arranging events
chronologically is a good way of telling a clear, concise story. As valuable as date-- and time--based
information often is to a case, none of the leading forensic tools offer usable date and time oriented tools.
Log2timeline is an excellent tool for extracting date and time based information from digital evidence. In
fact, the amount of information it extracts can overwhelm the examiner. [PDF]