[FR] Add a "local timezone" to a case

[xathon]

Please ensure your feature request is not already on the roadmap or associated with an issue. This can be checked here.

Is your feature request related to a problem? Please describe. Sometimes, the events of a case happen with a significant offset to UTC. It is thus not obvious if events happen at an unusual time, for example in the middle of the night.

Describe the solution you'd like I'd like to be able to add a timezone to a case, which is associated with the localtime of events. I can then add events in UTC (or by specifying the timezone, see also #294 ). When events are added, on the Events overview and on the graph, I'd like a toggle to switch timestamps from UTC to the local timezone.

Describe alternatives you've considered Another possibility is allowing the timestamps to follow the system timezone of the client (again, toggleable). Also, it might be worth having a dropdown in the overview to freely choose the timezone. Another very cool thing would be assigning timezones to assets and, when they are referenced in an Event, it shows its localtime. A less invasive way of displaying the local time would be by hovering over the UTC timestamp.

Additional context I am very aware of the rat's tail associated with this (what if the events happen in multiple time zones? how about daylight savings?), but being able to view events at least with a static offset would be quite helpful.

[whikernel]

Hi there!

These are all very good ideas! Indeed it's pretty niche but at the same time everything associated with TZ in IR/forensics are a pain, so if we can reduce this hassle it's already something! We're adding this to the roadmap tho we can't give any ETA atm.

Cheers