Sequence diagram investigation tools

Like timelines, sequence diagrams do not identify root causes, and therefore they should be used in conjunction with other tools. The mechanics of these tools are relatively easy to learn, but the investigator must exercise care to avoid locking into a preconceived scenario. For more information on sequence diagram tools refer to Chapter 9. 

Like a simpler timeline, a sequence diagram does not identify root causes, and therefore it should be used as part of a combined methodology with other tools. In this respect, a sequence diagram may be used in place of the timeline within the two main incident investigation methodologies presented in this chapter. 

---