timesketch
timesketch copied to clipboard
Filters out broken/invalid timestamps
Events with broken timestamps are not very useful. Would be nice to have an analyzer that adds a view with broken timestamps filtered out. Just a simple regex match or looking for known invalid timestamps like 0000-00-00, etc.
This would be a UI feature. Changing title to reflect this.
This has changed in the newUI. Closing this issue.