|
21 | 21 | import blackboxprotobuf
|
22 | 22 | from scripts.ccl_segb.ccl_segb import read_segb_file
|
23 | 23 | from scripts.ccl_segb.ccl_segb_common import EntryState
|
24 |
| -from scripts.ilapfuncs import artifact_processor, webkit_timestampsconv, convert_utc_human_to_timezone |
| 24 | +from scripts.ilapfuncs import artifact_processor, convert_utc_human_to_timezone, convert_ts_int_to_timezone, webkit_timestampsconv |
25 | 25 |
|
26 | 26 |
|
27 | 27 | @artifact_processor
|
@@ -52,9 +52,13 @@ def get_biomeTextinputses(files_found, report_folder, seeker, wrap_text, timezon
|
52 | 52 | protostuff, types = blackboxprotobuf.decode_message(record.data, typess)
|
53 | 53 |
|
54 | 54 | duration = protostuff['1']
|
55 |
| - #Seems like the time is stored with an extra cocoa core offset added? we have to subtract it |
56 |
| - timestart = (webkit_timestampsconv(protostuff['2']-978307200)) |
57 |
| - timestart = convert_utc_human_to_timezone(timestart, timezone_offset) |
| 55 | + # Records in "restricted" folder seem to have time in Unix time, whereas public was cocoa time |
| 56 | + if 'restricted' in file_found: |
| 57 | + timestart = (convert_ts_int_to_timezone(protostuff['2'], timezone_offset)) |
| 58 | + else: |
| 59 | + timestart = (webkit_timestampsconv(protostuff['2'])) |
| 60 | + timestart = convert_utc_human_to_timezone(timestart, timezone_offset) |
| 61 | + |
58 | 62 | bundleid = (protostuff.get('3',''))
|
59 | 63 |
|
60 | 64 | data_list.append((ts, timestart, record.state.name, bundleid, duration, filename,
|
|
0 commit comments