Microsoft Word Forensics

Content Leader: Jess Garcia - Last Updated: July 2, 2007

Tools

• MFC Docfile Viewer
  • The STG application demonstrates how to browse OLE Structured Storage Files (DocFiles) using an MFC application. The application uses the CTreeView class to visually represent the structured storage.

References

• Microsoft Office Security -- Part 1 - Part 2
  • The second part of this article, shows the "Avenues for MS Office forensic investigation", while the first part deals with Microsoft Office's OLE Structured Storage.