±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 4 Overall: 36595
New Yesterday: 5 Visitors: 171

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Forensics on PDF created from MS Word: tracing the authors

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

investigative-me
Newbie
 

Forensics on PDF created from MS Word: tracing the authors

Post Posted: Jan 15, 20 17:44

I have a PDF document created from Microsoft Word document based on a template which bears the name of a person as author of the PDF who legally should not have had access to the document ever, let alone be the person who is last to edit and wrap the document. Let's call this person "Unauthorised Person". It doesn't bare the name of the actual party who should have written the document. Let's call this person "Official Person".

I know that the author in a PDF is (depending on whether you save or print to PDF) either the original creator of the document template or the last party to modify the Word document.

I have other documents in Word format from the Unauthorised Person to compare. I also have other documents in PDF format from the Official Person to compare, based on the very same template.

I am looking to prove that the PDF was in fact edited by the Unauthorised Person, illegally working together with the Official Person. In Word this can be done by checking the XML files, however this is a PDF.

What can be done to see the PDF authors involved? Can the metadata on the included fonts in the PDF be an identifier?

Interestingly, it seems that the Unauthorised Person and the Official Person use different versions of Word and thus also their PDFs are created in 1.4 or 1.5 versions.

Any help is most welcome.  
 
  

keydet89
Senior Member
 

Re: Forensics on PDF created from MS Word: tracing the autho

Post Posted: Jan 15, 20 20:59

Do you have access to the system used by the unauthorized person?  
 
  

investigative-me
Newbie
 

Re: Forensics on PDF created from MS Word: tracing the autho

Post Posted: Jan 15, 20 21:06

- keydet89
Do you have access to the system used by the unauthorized person?



Thank you for your question. Sadly I don't have access to either of the systems, I just have these files.  
 

Page 1 of 1