This timeline is taken from a test case, created using a virtual machine and presented in a blog at the SANS forensic blog site.
This timeline only presents the browser activity on the host, that is the browsing history from both Firefox 3 and Internet Explorer from the user Joe.
Part one of the blog - introduction to the case
Part two of the blog - solving the case
Timeline version .