Esc

    Loading…

    ↑ ↓ move↵ open/ or ⌘K anywhere

    Synthetic demo data
    Investigative aid · not a verdictSign in

    Evidence viewer

    Verify source context, inspect extraction locators, and keep integrity metadata visible.

    Source viewer · E-05

    Inventory event log · E-05_inventory_event_log.csv

    Original rows as ingested (read-only). Highlighted rows produced timeline events.
    rowtimestampasset_idevent_codebadge_iddoornoteevent
    118:30:00EQ-3310CHECKED_INdaily count
    219:45:00EQ-2208CHECKED_OUTmaintenance
    321:00:00EQ-4471SECUREDend-of-shift checkEV-001
    421:01:30EQ-3310SECUREDend-of-shift check
    521:02:10EQ-2208RETURNEDmaintenance
    621:04:00EQ-1177SECUREDend-of-shift check
    721:09:00DOOR_OPENB-117LOADING-BAYimported from access systemEV-009
    821:25:00EQ-1177COUNTEDspot check
    921:40:00EQ-3310COUNTEDspot check
    1021:48:00EQ-2208COUNTEDspot check
    1121:55:00EQ-1177COUNTEDspot check
    1222:00:00EQ-4471MISSINGdiscovered during spot checkEV-020

    Linked events

    Events extracted from this source with precise locators.

    • EV-001EQ-4471 recorded as securedrow 321:00:00Supported
    • EV-009LOADING-BAY door opens (badge B-117)row 721:09:00Contradicted
    • EV-020EQ-4471 recorded as missingrow 1222:00:00Supported

    Source clock · E-05

    Now: Reference clock · no offset · Inventory server on NTP. Original times never change; only normalized time is re-worked.

    How does this source's clock relate to the reference?

    Pair a moment in this source with the same moment in a trusted source. The engine takes the median of the differences and shows every pair.