Also if this is so error prone, what time window do they consider appropriate for matching logs to usage? Are they accounting for time-zones or are they just go

Also if this is so error prone, what time window do they consider appropriate for matching logs to usage? Are they accounting for time-zones or are they just going to court and saying "5pm" blah blah blah. What percentage of the victims of this kind of error are also getting their hard-drives tampered with fake evidence like child porn. There is an incentive on the police department to not back down if they arrest someone - they can get sued - a hard drive full of that would have that lawsuit thrown out very quickly and likely without anyone wanting to pay for an external investigation.