diff --git a/TimberWinR/Inputs/WindowsEvtInputListener.cs b/TimberWinR/Inputs/WindowsEvtInputListener.cs index fcb19d1..18d73ba 100644 --- a/TimberWinR/Inputs/WindowsEvtInputListener.cs +++ b/TimberWinR/Inputs/WindowsEvtInputListener.cs @@ -137,6 +137,8 @@ namespace TimberWinR.Inputs object v = record.getValue(field.Name); if (field.Name == "Data") v = ToPrintable(v.ToString()); + if ((field.Name == "TimeGenerated" || field.Name == "TimeWritten") && field.DataType == typeof (DateTime)) + v = ((DateTime) v).ToUniversalTime(); json.Add(new JProperty(field.Name, v)); }