Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

mactime [DATE] issue #2712

Open
Kali0xC opened this issue May 16, 2022 · 0 comments
Open

mactime [DATE] issue #2712

Kali0xC opened this issue May 16, 2022 · 0 comments

Comments

@Kali0xC
Copy link

Kali0xC commented May 16, 2022

I tested mactime v4.11.1. In my test I used the same body file with the following commands.

Using switch -z UTC here (command 1):
mactime -z UTC -y -d -b /mnt/g/timeline/_test/computer_1.body 2018-08-23..2018-09-07 > /mnt/g/timeline/_test/computer_1.body_updated.csv

No -z UTC switch (command 2):
mactime -y -d -b /mnt/g/timeline/_test/computer_1.body 2018-08-23..2018-09-07 > /mnt/g/timeline/_test/computer_1.body_updated_no_z_switch.csv

mactime v4.11.1
There is a discrepancy with the output of the CSV files.

When using the -z UTC option (command 1, above) the timeline starts at 2018-08-23T00:40:33Z. This is the expected behavior and the timestamps are in UTC.

When excluding the -z UTC option (command 2, above) the timeline starts at 2018-08-23T04:45:21Z. The timestamps are still in UTC but it appears when the DATE filter is applied the timezone offset of my computer is being factored in.

Please let me know if I can supply any other information that would be helpful.

Thank you for your time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant