cyb3rfox / Aurora-Incident-Response

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
Apache License 2.0
742 stars 79 forks source link

Enhancement - Add Timezone Support #10

Open co-devs opened 4 years ago

co-devs commented 4 years ago

Add timezone columns OR add timezone to existing timezone columns. Allow users to add items with different timezones and standardize to case configuration default timezone. Display timezone in visualizations like Visual Timeline. Add default timezone selection to case configuration (default to UTC). Very useful for engagements involving investigators and clients spread across multiple timezones.

cyb3rfox commented 4 years ago

Good idea. So you are suggesting adding data in different timezones and just normalizing for visualization? That could be done easily. Sorting the grids by timestamps will not work any longer than. Until I can come up with a good solution for that I trust my responders that they are able to convert the tz of the artifact to UTC correctly. I keep that open as I plan a major improvement to the UI that would make what you suggest easier. In that case, every item would have two timestamps where one is with TZ and the other the UTC representation. Sorting happens on the UTC rep.

co-devs commented 4 years ago

Yeah I think the best option is, when I go to enter a time stamp, I pick the date, i pick the time, and then i pick the utc offset (or similar). Whatever offset I put in, the backend adjusts that to UTC+0 and stores it. UTC+0 should be the default, but I should be able to set that to something else via a drop down in the case configuration (everyone is working from UTC-5 and our client wants everything reported to them in UTC-5, so let's just use that rather than UTC)

But yes I agree, until then any responder should be able to enter times in the correct timezone without the system fixing it for them, and any incident commander should be ensuring that everyone is operating from a standard offset regardless of toolset

fiskeren commented 3 years ago

+1 for timezone support. Would be really nice to be able to change to 24H clock and select UTC