Most investigations collect events out of order and across many sources. A timeline reassembles them into a single chronological spine, turning a pile of findings into a narrative you can test. Sequence often reveals what individual facts hide — what happened before what, where the gaps are, and which claims cannot both be true.
What you'll need
- Your collected evidence, each item with a source and a timestamp
- A spreadsheet or dedicated tool, and General Frameworks resources for structure
- Archives tools to pin down and preserve dated sources
Steps
- Gather every dated item. Collect each piece of evidence and extract its timestamp, normalising all times to a single timezone (UTC is safest) to avoid ordering errors.
- Record the source for each entry. Attach the origin and, ideally, an archived copy to every event, preserving chain of custody so each entry can be defended.
- Plot events in sequence. Lay them out chronologically, capturing what happened, when, where, and how confident you are in each.
- Expose gaps and conflicts. Read the sequence for missing intervals and for events that contradict each other; these are leads, not annoyances.
- Cross-reference with link analysis. Combine the timeline with a link analysis of who and what connects, so time and relationships reinforce each other.
Common pitfalls
- Timezone errors. Mixing local times silently scrambles the order and can invert cause and effect.
- Trusting stated timestamps blindly. Post dates and file times can be wrong or forged — corroborate the important ones.
- Overcrowding the timeline. Every trivial event drowns the signal; include what matters and note confidence.
Verify your result
Your timeline is sound when every entry has a source and a normalised timestamp, the sequence is internally consistent, and the gaps and contradictions it exposes are documented as open questions.