Timestamps issues - Githubissues

abrignoni / iLEAPP

iOS Logs, Events, And Plist Parser

MIT License

733 stars 152 forks source link

Timestamps issues #840

Open Johann-PLW opened 2 weeks ago

Johann-PLW commented 2 weeks ago

Issues

Timestamps in HTML were not able to support timezone offset parameter.
Inconsistencies were observed between HTML and SQLite. I noticed that timestamps were not added appropriately in the lava SQLite. Timestamps are stored in the plist file as datetime objets and not str. When they were converted to be added in the SQLite database, datetime objets were considered in local time instead of UTC and then were converted in UTC.

Corrective action A new convert_plist_date_to_timezone_offset function was created in ilapfuncs.py to:

manage date objets 'YYYY-MM-DDTHH:MM:SSZ' in plist files
convert them to support timezone offset chosen by the user
add them in the correct timestamp in the lava SQLite database

JamesHabben commented 1 week ago

looks like not merged yet?

i am updating the module update guide based on this. can you review, correct, or add whatever needs to be included to help with this part of module updates? https://github.com/abrignoni/iLEAPP/blob/lava-output/admin/docs/module_updates.md