Change timeline desing to support event types grouping, like WinEvtx, filesystem MACD , P2P etc.
This could be used for:
- Filter out unimportant eventtypes that overloads timechart and timeline view.
- Index/cache based on more important timeevent groups, avoiding memory overload.
So the user could still view all timeevents, but for the more common, the APP would be optimized.