Chapter 6

Forensic Time

Abstract

This chapter examines time as a forensic factor. This chapter provides a brief history of computer-based time and demonstrates the use of the Python Standard Library time. This chapter also provides insight into national time keeping and the servers that are accessible for time synchronization. Finally, the Python Network Time Protocol Library ntplib is introduced and utilized to obtain time from a national time source.

Keywords

Network Time Protocol

Epoch

John Harrison

ntplib

Time

GMT

UTC

National Measurement Institutes

Greenwich

Get Python Forensics now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.