I used to have a tool on my lab computer which was able to simply decode many different timestamp formats (datetime, epoch, unix,...).

Well... it is not there anymore. Neither on my computer nor in my brain.

what was its name?? I need that nifty little tool again!!

It looked like one of those Nirsoft tools.. but I can't find it there.

Help!

#dfir #digitalforensics #foreniscs #MondayBrainOutage

@4n6

unfortunately no. It looked a lot different...

But DCode will do the job too I guess.

It just bugs the hell out of me that I can't remember this tool I used so so so often.

@TFG I didn’t download the latest version of the tool to check, but the UI on the website looks very different to what I remember of the tool. Earlier versions were just a text box and a drop down to select what format you were converting from.

@4n6

Textbox and drop down... that's what I remember from my lost tool too!!

Maybe it really WAS DCode?

@TFG let me see if I can find a copy of the old version somewhere in my tool stash. And assuming the licence lets me, I’ll post a link.
@TFG yep, so it looks like v5 introduced the more complicated UI. I have v4 in my collection, but it’s also available on archive.org https://web.archive.org/web/20190512175712/https://www.digital-detective.net/dcode/
DCode™ | Digital Detective

DCode™ is a simple utility for converting the hex and integer values found by investigators during a forensic investigation into readable timestamps.

Digital Detective

@4n6

No, that's not the UI I remember. But thanks for taking your time to look after it!!

Maybe I'll remember tomorrow, when my brain is (hopefully) back.

@TFG good luck! Dcode was my go-to for such a long time, it was a great little tool. I don’t use windows regularly anymore, though. I’d be interested in knowing what your tool was, if you can remember!