<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>IR and forensic talk &#187; timestamps</title>
	<atom:link href="http://blog.kiddaland.net/tag/timestamps/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.kiddaland.net</link>
	<description>Some useless talk mixed with hopefully interesting points every now and then</description>
	<lastBuildDate>Sat, 01 Oct 2011 01:06:05 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>timescanner and IE history</title>
		<link>http://blog.kiddaland.net/2010/04/timescanner-and-ie-history/</link>
		<comments>http://blog.kiddaland.net/2010/04/timescanner-and-ie-history/#comments</comments>
		<pubDate>Mon, 26 Apr 2010 12:43:13 +0000</pubDate>
		<dc:creator>kiddi</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Timeline analysis]]></category>
		<category><![CDATA[Windows Analysis]]></category>
		<category><![CDATA[index.dat]]></category>
		<category><![CDATA[internet explorer history]]></category>
		<category><![CDATA[log2timeline]]></category>
		<category><![CDATA[timestamps]]></category>

		<guid isPermaLink="false">http://blog.kiddaland.net/?p=249</guid>
		<description><![CDATA[There has been some discussion lately about some limitations to timescanner in regards to the reading of timestamps in various index.dat files.  More precisely Windows decided that it would store timestamps using different timezones depending on the location of the index.dat, instead of sticking with the good old UTC format.  So for instance the history [...]]]></description>
		<wfw:commentRss>http://blog.kiddaland.net/2010/04/timescanner-and-ie-history/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

