Having worked on cases where time is critical, having the time correct at the time of examination is an easier sell than verifying it was set to sync with a time server.
Or even worse, the clock was reset, and the machine was never connected to the internet.
If I didn't check the clock I would be saying "well it was synced to a time server so the clock was accurate" when in all reality that may not be true.It's always worth checking the clock since it takes a minute and there's virtually no harm in not using the information, but there's plenty if you need it and don't have it.
100% agree with this. As a defense expert, this becomes crucial when most systems have multiple physical users accessing a single user account. Matching up additional data from phones, call detail records etc can help to put a specific person at the keyboard. Whether you are law enforcement, defense or civil. That's the name of the game. I just don't see a reason to skip this step. It will help to avoid problems for all sides as the case proceeds.