Chapter 12. Solutions in this chapter

  • Microsoft Office
  • Recovering Office Files, PDFs, and Other Documents
  • Summary
  • Solutions Fast Track
  • Frequently Asked Questions

Introduction

Often, a suspect's computer documents can contain a treasure-trove of valuable information related to the case you're working on. Such information can include names, dates, times, organizations, and much more.

However, suspects can store their documents in a variety of different formats. For instance, they can store them as PDFs, text files, or Microsoft Office files. Therefore, as a computer forensic investigator, it is important that you know how to recover documents, regardless of format, and determine whom they belong to.

In this chapter, we will discuss metadata ...

Get Mac OS X, iPod, and iPhone Forensic Analysis DVD Toolkit now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.