ATTENTION: The new home of the Digital Forensics Wiki is at https://forensicswiki.xyz/. Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn
Zeitgeist is a service which logs the users's activities and events, anywhere from files opened to websites visited and conversations.
event_view seems one of the more interesting tables (which is technically a view and not a table).
The timestamp is formatter in milli seconds sinds POSIX epoch (Jan 1, 1970 00:00:00 UTC)
SELECT datetime((timestamp/1000), "unixepoch"), subj_uri, subj_origin_uri, subj_text, subj_storage, event_origin_uri, actor_uri FROM event_view;