time-decode 7.0.2__tar.gz → 8.0.0__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {time-decode-7.0.2/time_decode.egg-info → time_decode-8.0.0}/PKG-INFO +16 -10
- {time-decode-7.0.2 → time_decode-8.0.0}/README.md +13 -9
- {time-decode-7.0.2 → time_decode-8.0.0}/pyproject.toml +4 -2
- {time-decode-7.0.2 → time_decode-8.0.0}/time_decode/time_decode.py +1281 -404
- {time-decode-7.0.2 → time_decode-8.0.0/time_decode.egg-info}/PKG-INFO +16 -10
- {time-decode-7.0.2 → time_decode-8.0.0}/time_decode.egg-info/requires.txt +2 -0
- {time-decode-7.0.2 → time_decode-8.0.0}/LICENSE +0 -0
- {time-decode-7.0.2 → time_decode-8.0.0}/setup.cfg +0 -0
- {time-decode-7.0.2 → time_decode-8.0.0}/time_decode/__init__.py +0 -0
- {time-decode-7.0.2 → time_decode-8.0.0}/time_decode.egg-info/SOURCES.txt +0 -0
- {time-decode-7.0.2 → time_decode-8.0.0}/time_decode.egg-info/dependency_links.txt +0 -0
- {time-decode-7.0.2 → time_decode-8.0.0}/time_decode.egg-info/entry_points.txt +0 -0
- {time-decode-7.0.2 → time_decode-8.0.0}/time_decode.egg-info/top_level.txt +0 -0
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.1
|
|
2
2
|
Name: time-decode
|
|
3
|
-
Version:
|
|
3
|
+
Version: 8.0.0
|
|
4
4
|
Summary: Python 3 timestamp decode/encode tool
|
|
5
5
|
Author-email: "Corey Forman (digitalsleuth)" <github@digitalsleuth.ca>
|
|
6
6
|
Maintainer-email: "Corey Forman (digitalsleuth)" <github@digitalsleuth.ca>
|
|
@@ -39,8 +39,8 @@ License-File: LICENSE
|
|
|
39
39
|
Requires-Dist: PyQt6
|
|
40
40
|
Requires-Dist: python-dateutil
|
|
41
41
|
Requires-Dist: colorama
|
|
42
|
-
|
|
43
|
-
|
|
42
|
+
Requires-Dist: pytz
|
|
43
|
+
Requires-Dist: juliandate
|
|
44
44
|
|
|
45
45
|
# Time Decode
|
|
46
46
|
A Python 3 timestamp and date decoder/encoder.
|
|
@@ -63,8 +63,9 @@ This python script provides the following conversions from existing timestamps:
|
|
|
63
63
|
- 128-bit SYSTEMTIME
|
|
64
64
|
- 32-bit MS-DOS time, result is Local
|
|
65
65
|
- Active Directory value
|
|
66
|
-
-
|
|
67
|
-
- Apple Biome hex
|
|
66
|
+
- Apache Cookie
|
|
67
|
+
- Apple Biome hex value
|
|
68
|
+
- Apple Biome 64-bit decimal value
|
|
68
69
|
- Bitwise decimal 10-digit
|
|
69
70
|
- BPlist (as NSDate)
|
|
70
71
|
- Cocoa Core (as NSDate)
|
|
@@ -76,15 +77,18 @@ This python script provides the following conversions from existing timestamps:
|
|
|
76
77
|
- GMail Boundary
|
|
77
78
|
- GMail Message ID
|
|
78
79
|
- Google Chrome value
|
|
79
|
-
- Google EI URL
|
|
80
|
+
- Google EI URL
|
|
80
81
|
- GPS
|
|
81
82
|
- GSM
|
|
82
83
|
- HFS(+) BE, HFS Local, HFS+ UTC
|
|
83
84
|
- HFS(+) LE, HFS Local, HFS+ UTC
|
|
84
85
|
- Hotmail
|
|
85
86
|
- iOS 11+ (as NSDate)
|
|
87
|
+
- Julian Decimal date
|
|
88
|
+
- Julian Hex date
|
|
86
89
|
- KSUID 27-character
|
|
87
90
|
- KSUID 9-digit
|
|
91
|
+
- LEB128 hex
|
|
88
92
|
- Mac Absolute Time (as NSDate)
|
|
89
93
|
- Mac OS/HFS+ Decimal Time
|
|
90
94
|
- Mastodon URL
|
|
@@ -98,15 +102,17 @@ This python script provides the following conversions from existing timestamps:
|
|
|
98
102
|
- Nokia S40 7-byte
|
|
99
103
|
- Nokia S40 7-byte LE
|
|
100
104
|
- OLE Automation Date
|
|
101
|
-
- S32 Encoded (
|
|
105
|
+
- S32 Encoded (BlueSky Social)
|
|
102
106
|
- Samsung/LG 4-byte
|
|
103
|
-
-
|
|
107
|
+
- Semi-Octet decimal value
|
|
108
|
+
- Sonyflake URL
|
|
104
109
|
- Symantec's 6-byte AV
|
|
105
110
|
- TikTok URL
|
|
106
111
|
- Twitter URL
|
|
107
112
|
- Unix Hex 32-bit BE
|
|
108
113
|
- Unix Hex 32-bit LE
|
|
109
114
|
- Unix Milliseconds
|
|
115
|
+
- Unix Milliseconds (hex)
|
|
110
116
|
- Unix Seconds
|
|
111
117
|
- UUID
|
|
112
118
|
- VMWare Snapshot (.vmsd)
|
|
@@ -121,9 +127,9 @@ Note that HFS times are in Local Time, where HFS+ times are in UTC. MS-DOS 32 bi
|
|
|
121
127
|
I have added a feature to 'guess' in what format the timestamp is that you've provided. This will run the timestamp you provide against all methods, and provide an output if human-readable.
|
|
122
128
|
There is also the ability to convert a date-time to all of the aforementioned timestamps. Simply use the following command:
|
|
123
129
|
|
|
124
|
-
`time-decode --timestamp "
|
|
130
|
+
`time-decode --timestamp "2017-06-02 13:14:15.678"`
|
|
125
131
|
or for timezones use:
|
|
126
|
-
`time-decode --timestamp "
|
|
132
|
+
`time-decode --timestamp "2017-06-02 13:14:15 -5"`
|
|
127
133
|
|
|
128
134
|
The date/time you enter should be in the "YYYY-mm-dd HH:MM:SS.sss" format with the double-quote included, but does not require milli/micro/nano seconds to work. (Double-quote required for Windows Python)
|
|
129
135
|
If anyone has any other timestamps they think should be added to this tool, please let me know.
|
|
@@ -1,5 +1,3 @@
|
|
|
1
|
-

|
|
2
|
-
|
|
3
1
|
# Time Decode
|
|
4
2
|
A Python 3 timestamp and date decoder/encoder.
|
|
5
3
|
|
|
@@ -21,8 +19,9 @@ This python script provides the following conversions from existing timestamps:
|
|
|
21
19
|
- 128-bit SYSTEMTIME
|
|
22
20
|
- 32-bit MS-DOS time, result is Local
|
|
23
21
|
- Active Directory value
|
|
24
|
-
-
|
|
25
|
-
- Apple Biome hex
|
|
22
|
+
- Apache Cookie
|
|
23
|
+
- Apple Biome hex value
|
|
24
|
+
- Apple Biome 64-bit decimal value
|
|
26
25
|
- Bitwise decimal 10-digit
|
|
27
26
|
- BPlist (as NSDate)
|
|
28
27
|
- Cocoa Core (as NSDate)
|
|
@@ -34,15 +33,18 @@ This python script provides the following conversions from existing timestamps:
|
|
|
34
33
|
- GMail Boundary
|
|
35
34
|
- GMail Message ID
|
|
36
35
|
- Google Chrome value
|
|
37
|
-
- Google EI URL
|
|
36
|
+
- Google EI URL
|
|
38
37
|
- GPS
|
|
39
38
|
- GSM
|
|
40
39
|
- HFS(+) BE, HFS Local, HFS+ UTC
|
|
41
40
|
- HFS(+) LE, HFS Local, HFS+ UTC
|
|
42
41
|
- Hotmail
|
|
43
42
|
- iOS 11+ (as NSDate)
|
|
43
|
+
- Julian Decimal date
|
|
44
|
+
- Julian Hex date
|
|
44
45
|
- KSUID 27-character
|
|
45
46
|
- KSUID 9-digit
|
|
47
|
+
- LEB128 hex
|
|
46
48
|
- Mac Absolute Time (as NSDate)
|
|
47
49
|
- Mac OS/HFS+ Decimal Time
|
|
48
50
|
- Mastodon URL
|
|
@@ -56,15 +58,17 @@ This python script provides the following conversions from existing timestamps:
|
|
|
56
58
|
- Nokia S40 7-byte
|
|
57
59
|
- Nokia S40 7-byte LE
|
|
58
60
|
- OLE Automation Date
|
|
59
|
-
- S32 Encoded (
|
|
61
|
+
- S32 Encoded (BlueSky Social)
|
|
60
62
|
- Samsung/LG 4-byte
|
|
61
|
-
-
|
|
63
|
+
- Semi-Octet decimal value
|
|
64
|
+
- Sonyflake URL
|
|
62
65
|
- Symantec's 6-byte AV
|
|
63
66
|
- TikTok URL
|
|
64
67
|
- Twitter URL
|
|
65
68
|
- Unix Hex 32-bit BE
|
|
66
69
|
- Unix Hex 32-bit LE
|
|
67
70
|
- Unix Milliseconds
|
|
71
|
+
- Unix Milliseconds (hex)
|
|
68
72
|
- Unix Seconds
|
|
69
73
|
- UUID
|
|
70
74
|
- VMWare Snapshot (.vmsd)
|
|
@@ -79,9 +83,9 @@ Note that HFS times are in Local Time, where HFS+ times are in UTC. MS-DOS 32 bi
|
|
|
79
83
|
I have added a feature to 'guess' in what format the timestamp is that you've provided. This will run the timestamp you provide against all methods, and provide an output if human-readable.
|
|
80
84
|
There is also the ability to convert a date-time to all of the aforementioned timestamps. Simply use the following command:
|
|
81
85
|
|
|
82
|
-
`time-decode --timestamp "
|
|
86
|
+
`time-decode --timestamp "2017-06-02 13:14:15.678"`
|
|
83
87
|
or for timezones use:
|
|
84
|
-
`time-decode --timestamp "
|
|
88
|
+
`time-decode --timestamp "2017-06-02 13:14:15 -5"`
|
|
85
89
|
|
|
86
90
|
The date/time you enter should be in the "YYYY-mm-dd HH:MM:SS.sss" format with the double-quote included, but does not require milli/micro/nano seconds to work. (Double-quote required for Windows Python)
|
|
87
91
|
If anyone has any other timestamps they think should be added to this tool, please let me know.
|
|
@@ -7,11 +7,13 @@ exclude = ["debian*", "binaries*", "build*", "dist*"]
|
|
|
7
7
|
|
|
8
8
|
[project]
|
|
9
9
|
name = "time-decode"
|
|
10
|
-
version = "
|
|
10
|
+
version = "8.0.0"
|
|
11
11
|
dependencies = [
|
|
12
12
|
"PyQt6",
|
|
13
13
|
"python-dateutil",
|
|
14
|
-
"colorama"
|
|
14
|
+
"colorama",
|
|
15
|
+
"pytz",
|
|
16
|
+
"juliandate"
|
|
15
17
|
]
|
|
16
18
|
requires-python = ">=3.6"
|
|
17
19
|
authors = [
|