2020-12-18 12:42 PM
The ESA Rule Failed Logins Outside Business Hours change the event time to UTC +3:00. The correct event time is 09:38:41. Why Raw Log is 12:38:41?
RAW Log
Fri Dec 18 12:38:41 2020
Collection Time
Time Zone of the Netwitness hosts and Windows Domain controller is GMT -3