From ForensicsWiki
Jump to: navigation, search

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Zeitgeist is a service which logs the users's activities and events, anywhere from files opened to websites visited and conversations.



event_view seems one of the more interesting tables (which is technically a view and not a table).

The timestamp is formatter in milli seconds sinds POSIX epoch (Jan 1, 1970 00:00:00 UTC)

SELECT datetime((timestamp/1000), "unixepoch"), subj_uri, subj_origin_uri, subj_text, subj_storage, event_origin_uri, actor_uri FROM event_view;

External Links