home/categories/debugging/tsale-awesome-dfir-skills-skills-analysis-windows-intrusion-timeline-skill-md
debuggingtools

windows-intrusion-timeline-targeted

Create a targeted intrusion timeline for a Windows incident using whatever artifacts are available (event logs, EDR, SIEM exports, triage notes).

tsale
maintainer
tsale
Updated 1/18/2026
Stars
213
Forks
14
quick start

Installation and usage

Create a targeted intrusion timeline for a Windows incident using whatever artifacts are available (event logs, EDR, SIEM exports, triage notes).

Installation
$ install --globalskills.sh
Usage

Once installed, you can use this skill by running the following command in your terminal:

skills use windows-intrusion-timeline-targeted