Man page - time-decode(1)

Packages contains this manual

Package:  time-decode
apt-get install time-decode

Manuals in package:
• time-decode(1)
Documentations in package:
• time-decode

Manual

TIME_DECODE

NAME
DESCRIPTION
options:

---

NAME

time_decode - timestamp decoder and converter

DESCRIPTION

usage: time_decode [-h] [-g] [--guess TIMESTAMP] [--timestamp [DATE]]
[--active ] [--apache ] [--auto ] [--biome64 ]

[--biomehex ] [--bitdate ] [--bitdec ] [--bplist ] [--chrome ] [--cookie ] [--dhcp6 ] [--discord ] [--dotnet ] [--eitime ] [--exfat ] [--fat ] [--ft ] [--gbound ] [--gmsgid ] [--gps ] [--gsm ] [--hfsbe ] [--hfsle ] [--hfsdec ] [--hotmail ] [--iostime ] [--jdec ] [--jhex ] [--ksdec ] [--ksalnum ] [--leb128 ] [--mac ] [--mastodon ] [--meta ] [--moto ] [--ms1904 ] [--msdos ] [--nokia ] [--nokiale ] [--ns40 ] [--ns40le ] [--nsdate ] [--oleb ] [--olel ] [--pr ] [--s32 ] [--semi ] [--sony ] [--sym ] [--systime ] [--tiktok ] [--twitter ] [--uhbe ] [--uhle ] [--unix ] [--umil ] [--umilhex ] [--uu ] [--vm ] [--wh ] [--whle ] [--version]

Time Decoder and Converter v9.0.0 - supporting 61 timestamps!

Some timestamps are only part of the entire value, and as such, full timestamps may not be generated based on only the date/time portion.

options:

-h , --help

show this help message and exit

-g , --gui

launch the gui

--guess TIMESTAMP

guess the timestamp format and output possibilities

--timestamp [DATE]

convert date to every timestamp enter date as "YYYY-MM-DD HH:MM:SS.f" in 24h fmt Without DATE argument, will convert current date/time

--active

convert from Active Directory value

--apache

convert from an Apache Cookie hex value

--auto

convert from OLE Automation Date format

--biome64

convert from an Apple Biome 64-bit decimal

--biomehex

convert from an Apple Biome hex value

--bitdate

convert from a Samsung/LG 4-byte value

--bitdec

convert from a bitwise decimal 10-digit value

--bplist

convert from an iOS Binary Plist value

--chrome

convert from Google Chrome value

--cookie

convert from Windows Cookie Date (Low,High)

--dhcp6

convert from a DHCP6 DUID value

--discord

convert from a Discord URL value

--dotnet

convert from a .NET DateTime value

--eitime

convert from a Google EI URL value

--exfat

convert from an exFAT 4-byte value

	--fat		convert from FAT Date + Time (wFat)
	--ft		convert from a FILETIME value

--gbound

convert from a GMail Boundary value

--gmsgid

convert from a GMail Message ID value

	--gps		convert from a GPS value
	--gsm		convert from a GSM value

--hfsbe

convert from HFS(+) BE (HFS=Local, HFS+=UTC)

--hfsle

convert from HFS(+) LE (HFS=Local, HFS+=UTC)

--hfsdec

convert from a Mac OS/HFS+ Decimal value

--hotmail

convert from a Hotmail value

--iostime

convert from an iOS 11 value

	--jdec		convert from a Julian Date decimal value
	--jhex		convert from a Julian Date hex value

--ksdec

convert from a KSUID 9-digit value

--ksalnum

convert from a KSUID 27-character value

--leb128

convert from a LEB128 hex value

--mac

convert from Mac Absolute Time

--mastodon

convert from a Mastodon URL value

	--meta		convert from a Metasploit Payload UUID
	--moto		convert from Motorola’s 6-byte value

--ms1904

convert from MS Excel 1904 Date format

--msdos

convert from 32-bit MS-DOS time, result is Local

--nokia

convert from a Nokia 4-byte value

--nokiale

convert from a Nokia 4-byte LE value

--ns40

convert from a Nokia S40 7-byte value

--ns40le

convert from a Nokia S40 7-byte LE value

--nsdate

convert from an Apple NSDate (iOS, BPList, Cocoa, Mac Absolute)

	--oleb		convert from a Windows OLE 64-bit BE value, remove 0x & space - example from SRUM: 0x40e33f5d 0x97dfe8fb should be 40e33f5d97dfe8fb
	--olel		convert from a Windows OLE 64-bit LE value
	--pr		convert from Mozilla’s PRTime
	--s32		convert from an S32-encoded value
	--semi		convert from a Semi-Octet decimal value
	--sony		convert from a Sonyflake URL value
	--sym		convert from Symantec’s 6-byte AV value

--systime

convert from a 128-bit SYSTEMTIME value

--tiktok

convert from a TikTok URL value

--twitter

convert from a Twitter URL value

	--uhbe		convert from Unix Hex 32-bit BE
	--uhle		convert from Unix Hex 32-bit LE
	--unix		convert from Unix Seconds
	--umil		convert from Unix Milliseconds

--umilhex

convert from Unix Milliseconds 6-byte Hex value

	--uu		convert from a UUID: 00000000-0000-0000-0000-000000000000
	--vm		convert from a VMWare Snapshot (.vmsd) value - enter as "high value,low value"
	--wh		convert from Windows 64-bit Hex BE
	--whle		convert from Windows 64-bit Hex LE

--version , -v

show program’s version number and exit

---