identify events during dst transitions · impossible skipped-hour timestamps · ambiguous repeated-hour events · export csv · runs locally
drop evtx · mft · syslog csv