Two scripts here to help creating timeline on Linux live systems :

• filetimeline.py : get a list of files in a folder with their change time, modification time and birth time using stat (which does not give the creation time even if the file system has it)
• mactime.py : convert this list of files into a csv timeline

Misc :

• extract_chrome_history.py: extract history from a Chrome History SQlite file
• ios_unpack.py : unpack iOS backup folder from iTunes or libimobiledevice