Log Name: System
Source: LsaSrv
Date: <date> <time>
Event ID: 45058
Task Category: Logon Cache
Level: Information
Keywords: Classic
User: N/A
Computer: computername.contoso.com
Description:
A logon cache entry for user USERNAME@EXAMPLE.COM was the oldest entry and was removed. The timestamp of this entry was **MM/DD/YYYY HH:MM:SS**
Given the above example evtx log, is the timestamp time zone in the description UTC? My understanding is the Date/Time of the actual event log is in UTC, I just want to confirm the date and time provided in the description is in UTC as well. This is a win2k8 OS. Thanks