Accurate Time Zone ...
 
Notifications
Clear all

Accurate Time Zone Configuration in Encase 7 Forensic

3 Posts
3 Users
0 Likes
1,037 Views
(@clay7)
Posts: 1
New Member
Topic starter
 

Hello,

I am trying to accurately configure a Windows-based evidence item in Encase 7 to reflect the appropriate time zone settings of the subject drive, according to the TimeZoneInformation sub-key of the SYSTEM hive registry file. I've reviewed numerous articles, such as http//wordpress.bladeforensics.com/?tag=time-zone, but am having trouble understanding them.

For example, my local machine is set to CST. How can I configure Encase to display the accurate time zone settings of the subject drive and not reflect my local time zone.

Any guidance is greatly appreciated!

 
Posted : 10/01/2013 9:12 pm
(@mansiu)
Posts: 83
Trusted Member
 

hope it helps

 
Posted : 11/01/2013 3:25 pm
jhup
 jhup
(@jhup)
Posts: 1442
Noble Member
 

Set EnCase to UTC.

 
Posted : 11/01/2013 10:00 pm
Share: