Which option best describes the purpose of timeline analysis in a forensic investigation?

A. To support event reconstruction during an investigation. B. To perform network design without authorization. C. To replace all legal documentation. D. To avoid evidence documentation.