By default, the Audit Viewer displays acquisition data in the Timeline view. The data depends on the data collected by the triage or data acquisition request.
To select different forensic data to review in the Audit Viewer, click on the type of data you want to see in the Data Acquisition section on the left side of the page. For information about these acquisition types, see Acquisition type reference.