Patent attributes
A display is created and manipulated in connection with an event, such as a notable security event investigation. A plurality of activity indicators for the event are displayed in a time order using both horizontal and vertical directions. Each activity indicator corresponds to a an activity related to the event. A linear display of shapes is provided, each shape corresponding to one or more of the activity indicators, of the same type, in a time sequence. In response to a user action, the time period corresponding to the plurality of shapes is changed so that shapes corresponding to a new time period selected by the user are displayed. Also in response to this user action, only the activity indicators corresponding to the new time period selected by the user are displayed.