sysdig uses the local time of the local machine to render timestamps, so for the tests they need to be normalized to UTC