Collaborative forensics timeline analysis