Business & Productivity Difficulty: Advanced

Create a Forensic Timeline and Activity Reconstruction Using Digital Evidence

This prompt guides investigators to analyze digital evidence to establish a chronological timeline of events and reconstruct activities. It instructs to identify relevant data sources, extract timestamps and metadata, correlate findings, and produce a detailed timeline report. The output is structured as a comprehensive forensic timeline framework suitable for investigative use.

The prompt

94 words1 blank to fill in

Act as a professional digital forensic investigator with expertise in timeline analysis and activity reconstruction. Based on the provided digital evidence from [DATA SOURCES], placeholder, create a detailed chronological timeline of events by extracting and correlating timestamps, metadata, and relevant artifacts. Analyze the data to reconstruct user or system activities, identify event sequences, and highlight critical incidents. Deliver the results as a comprehensive forensic timeline report and activity reconstruction framework suitable for investigative purposes. Present the output as a structured forensic timeline and activity reconstruction system that guides the investigative process from start to finish.

Highlighted text is a blank. Swap it for your own detail before you send the prompt.

What it produces

  • A chronological timeline listing events with timestamps and source details.
  • A reconstructed sequence of user actions derived from correlated digital artifacts.
  • Identification of critical incidents and anomalies within the timeline.
  • A structured forensic report outlining methodology, findings, and conclusions.

How to use this prompt

Four steps, about a minute. Nothing to install and no account needed.

  1. Copy the prompt

    Use the Copy button above. The whole prompt goes to your clipboard exactly as written. Nothing is trimmed.

  2. Fill in the blanks

    Replace [DATA SOURCES] with your own detail. Everything in square brackets is a blank for you to fill in.

  3. Paste it into your assistant

    Checked against ChatGPT, Claude, Gemini. It is written as plain instructions, so paste it into whichever of them you already use.

  4. Read the result, then push back

    Compare what you get to the example below. If it is close but not right, say what to change: shorter, warmer, more specific, then ask again in the same conversation.

More prompts like this one

Close neighbours in Business & Productivity, by shared subject and tagging.

Share Create a Forensic Timeline and Activity Reconstruction Using Digital Evidence:

Reviews and questions

What other people got out of this prompt, and what they asked about it.

No reviews yet

Be the first to share how this prompt worked for you.