Application analytics

Incident Timeline Reconstruction

Rebuild a disputed incident from raw application history, deploy markers, and identity continuity so the postmortem rests on evidence.

HK$29,500 · 3-week study

Abstract data visualization glowing on a screen

Postmortems stall when charts disagree about when users felt pain. Timezone mishandling, anonymous-to-known identity merges, and missing deploy tags invent cliffs that never happened in the product.

This study rebuilds the timeline from raw event history for one agreed incident window, checks identity continuity across platforms, and tests early-session behaviours against error spikes.

You leave with a corrected timeline, a list of artefacts to stop celebrating, and a reusable outline your ops analysts can maintain after we leave.

Typically included

  • Raw-history timeline rebuild
  • Identity continuity checks
  • Artefact shortlist
  • Analyst handoff outline