Say When - Trusting Log Timestamps
...correctly describes when the event actually happened
We will start from locating the timestamps in logs. Most of the log formats, such as file-based logs (web, application, some security gear, etc) and syslog, Windows event logs, database audit tables, proprietary ones, contain a timestamp . In fact, once I saw somebody use a timestamp to...
