Forensics on PDF cr...
 
Notifications
Clear all

Forensics on PDF created from MS Word: tracing the authors  

  RSS
investigative-me
(@investigative-me)
New Member

I have a PDF document created from Microsoft Word document based on a template which bears the name of a person as author of the PDF who legally should not have had access to the document ever, let alone be the person who is last to edit and wrap the document. Let's call this person "Unauthorised Person". It doesn't bare the name of the actual party who should have written the document. Let's call this person "Official Person".

I know that the author in a PDF is (depending on whether you save or print to PDF) either the original creator of the document template or the last party to modify the Word document.

I have other documents in Word format from the Unauthorised Person to compare. I also have other documents in PDF format from the Official Person to compare, based on the very same template.

I am looking to prove that the PDF was in fact edited by the Unauthorised Person, illegally working together with the Official Person. In Word this can be done by checking the XML files, however this is a PDF.

What can be done to see the PDF authors involved? Can the metadata on the included fonts in the PDF be an identifier?

Interestingly, it seems that the Unauthorised Person and the Official Person use different versions of Word and thus also their PDFs are created in 1.4 or 1.5 versions.

Any help is most welcome.

Quote
Posted : 15/01/2020 5:44 pm
keydet89
(@keydet89)
Community Legend

Do you have access to the system used by the unauthorized person?

ReplyQuote
Posted : 15/01/2020 8:59 pm
investigative-me
(@investigative-me)
New Member

Do you have access to the system used by the unauthorized person?

Thank you for your question. Sadly I don't have access to either of the systems, I just have these files.

ReplyQuote
Posted : 15/01/2020 9:06 pm
Share: