I wanted to spark a thread to get some thoughts on Microsoft Office 2010, experiences any of you've had with it from a Forensic perspective and why or why haven't you used it?
Well not so much from the investigating of the data but using Excel 2010 for working with exported results has been very good. Recently I was investigating of tens of thousands of records from an exported QuickBooks file and the de-duping, filtering and sorting was very good.
The structure of the Office Open XML that came into play with MSO 2K7 was certainly new and parsing the meta data has required some adjustments
http//
http//
Then there is SharPoint - nothing crazy just need a method-centric approach to the preservation and analysis. New tools are coming to market but one should know methods and approaches to gathering the data.
Thank you very much for your timely response, Doug.