December 2008
Intermediate to advanced
576 pages
13h 57m
English
Often, a suspect's computer documents can contain a treasure-trove of valuable information related to the case you're working on. Such information can include names, dates, times, organizations, and much more.
However, suspects can store their documents in a variety of different formats. For instance, they can store them as PDFs, text files, or Microsoft Office files. Therefore, as a computer forensic investigator, it is important that you know how to recover documents, regardless of format, and determine whom they belong to.
In this chapter, we will discuss metadata ...
Read now
Unlock full access