here's a util I came across on Michael zalewski's site.
You can use it to search word docs for changes and metadata etc…
Thanks for that one,
Cheers,
Jamie
I have a Perl script in my book for doing the same thing, and it runs on Windows. I've also listed other tools in my book for pulling metadata from other documents, as well.
Given these are Perl scripts, they can easily be converted to standalone EXEs, which I've started doing:
H. Carvey
"Windows Forensics and Incident Recovery"
Thanks Harlan.
I don't know if you saw one of my earlier posts to another topic but I was wondering if you have a short extract from the book which we might be able to add to our "Papers & Articles" page ( http://www.forensicfocus.com/computer-forensics-papers.php )? Please feel free to PM me, thanks.
Kind regards,
Jamie