From ec2ec6691506704ca17e3b28145dd25d50317e34 Mon Sep 17 00:00:00 2001 From: Markus Thurner Date: Mon, 13 Apr 2015 12:27:36 +0200 Subject: [PATCH] Convert TimeGenerated and TimeWritten to UTC. --- TimberWinR/Inputs/WindowsEvtInputListener.cs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/TimberWinR/Inputs/WindowsEvtInputListener.cs b/TimberWinR/Inputs/WindowsEvtInputListener.cs index fcb19d1..18d73ba 100644 --- a/TimberWinR/Inputs/WindowsEvtInputListener.cs +++ b/TimberWinR/Inputs/WindowsEvtInputListener.cs @@ -137,6 +137,8 @@ namespace TimberWinR.Inputs object v = record.getValue(field.Name); if (field.Name == "Data") v = ToPrintable(v.ToString()); + if ((field.Name == "TimeGenerated" || field.Name == "TimeWritten") && field.DataType == typeof (DateTime)) + v = ((DateTime) v).ToUniversalTime(); json.Add(new JProperty(field.Name, v)); }