I was working with SQL server audits and built a server audit and server audit specification. When viewing the logs, I noticed that the time of the events in the logs showed as 15:30 (3:30 PM) while the time on my server was only 10:30. I ran select GETDATE() and that showed the local time as I had expected (~10:30).
I checked for this issue online and apparently it is a bug in Katami (code name for SQL 2008). The time shown is the UTC time which was 5 hours ahead. This made sense as to why 10:30 was showing up as 15:30 in the audit logs.
Stanley Johns's Database Blog 