Microsoft Powerpoint Forensics

Content Leader: Jess Garcia - Last Updated: July 2, 2007

Tools

• extract (Linux) -- Extracts Metadata information from a varied number of document formats.

     Example:
     The output of the tool for this powerpoint presentation (excellent by the way) by Wietse Venema is:

     mimetype - application/vnd.ms-powerpoint
     paragraph count - 196
     last saved by - Wietse Venema
     creation date - 2003-08-16T14:16:28Z
     title - The broken file shredder
     word count - 934
     creator - wietse
     date - 2006-10-04T00:59:02Z
     generator - Microsoft PowerPoint