WebKit/Chrome time

When analyzing iOS application data, especially for web browsers such as Google Chrome, Safari, and Opera, you may face another timestamp format—WebKit/Chrome time. This is the number of microseconds since midnight on January 1, 1601. There is also an online converter for this: https://www.epochconverter.com/webkit.

If you don't like or don't want to use online converters for some reason, you can also use a free tool: Digital Detective's DCode. This tool can be used to convert timestamps in a number of different formats, including Unix time (both seconds and milliseconds), Mac absolute time, and WebKit/Chrome time, as shown in the following screenshot:
A WebKit/Chrome timestamp converted with DCode

Many commercial mobile forensic suites will easily convert extracted timestamps for you automatically, but in some cases, it's extremely important to validate it, so it's a must for you to clearly understand the timestamp formats.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.128.205.109