Chapter 6

Forensic Time

Abstract

This chapter examines time as a forensic factor. This chapter provides a brief history of computer-based time and demonstrates the use of the Python Standard Library time. This chapter also provides insight into national time keeping and the servers that are accessible for time synchronization. Finally, the Python Network Time Protocol Library ntplib is introduced and utilized to obtain time from a national time source.

Keywords

Network Time Protocol

Epoch

John Harrison

ntplib

Time

GMT

UTC

National Measurement Institutes

Greenwich

Get Python Forensics now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.