Documents Forensics

Content Leader: Jess Garcia - Last Updated: July 2, 2007

Index

• Word
• Excel
• Powerpoint
• PDF

Formats

Identifying the File Type

The type of a file can be identified by:

• Analyzing the file extension.
  • Refs: FILExt
• Analyzing the file signature & format
  • Tools:
    • file
  • Refs:
    • Wotsit's Format

Resources

• Wotsit's Format
• FILExt

Metadata

• Metadata Wiping & Recovery Tools: See the Forensics Software Section

Stories

• Washington Post's scanned-to-PDF Sniper Letter More Revealing Than Intended - Posted version allows easy removal of blacked-out details
• PDF Secrets Revealed - PDF file redaction snafu exposes agents' identities