Notifications
Clear all

Excel modification

6 Posts
4 Users
0 Reactions
576 Views
(@gk-forensics)
Active Member
Joined: 14 years ago
Posts: 6
Topic starter  

I would like to get metadata from an excel file. I would also like to know if I could examine metadata of the user or the computer which made this modification. Where I have to look for?


   
Quote
(@bithead)
Noble Member
Joined: 20 years ago
Posts: 1206
 

Can you help us help you by providing more information? Just some little things are required to even begin to answer What OS? And what version of Excel?

Also can you tell us what user metadata or computer metadata you would like to examine?

Further what steps have you taken so far to look at any of the metadata?


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

It would be very helpful to know in which version of Excel the spreadsheet was created. Is it .xls or .xlsx? The two file formats contain very different data, although you can get a good deal of data from both formats using ExifTool.


   
ReplyQuote
(@gk-forensics)
Active Member
Joined: 14 years ago
Posts: 6
Topic starter  

They are .xls files. And I would like to see if these files were modified and if I could find the dates of the modification.


   
ReplyQuote
(@cults14)
Reputable Member
Joined: 17 years ago
Posts: 367
 

Have you opened the file in Excel and looked at the metadata?

AFAIK, the General tab shows Windows timestamps; the Statistics tab shows "actual" timestamps - the time you opened the file will be the last access time in both these tabs

If you're looking for mass processing, ListIt from www.forensictool.com.ac does a pretty decent job and is inexpensive (but not free)

HTH

Cheers


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

They are .xls files. And I would like to see if these files were modified and if I could find the dates of the modification.

Well, like I said, check out ExifTool…


   
ReplyQuote
Share: