Timelines
Brief
I like timelines, particularly when it comes to forensic investigations.
There I said it. The first step to addressing an issue is admitting that you have a problem.
I've been creating timelines since about 2008-ish, or so. I have a series of blog posts specifically on the topic of timeline analysis starting in Feb 2009 , where I walk through some of the tools I used at the time to create timelines based on a 5-field "TLN" format that I developed... and still use to this day.
For example, take a look at this recent Huntress blog post regarding activity attributed to the group "MuddyWater"; the time-based information in the blog post has the "Z" stripped from the time stamp, and spacing reduced, but when I drafted parts of this blog post, those sections included timeline info.