Notifications
Clear all
Topic starter
Hello,
I am trying to accurately configure a Windows-based evidence item in Encase 7 to reflect the appropriate time zone settings of the subject drive, according to the TimeZoneInformation sub-key of the SYSTEM hive registry file. I've reviewed numerous articles, such as http//
For example, my local machine is set to CST. How can I configure Encase to display the accurate time zone settings of the subject drive and not reflect my local time zone.
Any guidance is greatly appreciated!
Posted : 10/01/2013 9:12 pm
hope it helps
Posted : 11/01/2013 3:25 pm
Set EnCase to UTC.
Posted : 11/01/2013 10:00 pm