Hey! Any pointers on figuring out why queries from some hosts are reporting dates in the future (203X but less than 2038)? The odd part when logging into the affected hosts some have the correct system time. How does Fleet set the timestamp for query results? Does it rely on time reported by the osquery's daemon?

This may not be an answer, but it could be related to the Year 2038 problem: https://en.wikipedia.org/wiki/Year_2038_problem I've seen this manifest itself when dealing with cert expirations.