Re: Forensics on Word Documents

From: jamie rishaw (jamieat_private)
Date: Fri Sep 14 2001 - 12:26:28 PDT

  • Next message: jswoffordat_private: "RE: Special case in investigation"

    running it through UNIX 'strings' is always one of the first things I
    do to any document or file that I don't know of -- it's invaluable in
    a lot of things..
    
    jamie
    
    On Fri, Sep 14, 2001 at 03:57:56PM +1000, Nicole Haywood wrote:
    > I've got to do a comparison on a couple of versions of word documents to try to determine which was created first etc.
    > 
    > Is there anything any one can suggest I look at in a word document other than creation date and revisions etc.
    > 
    > Thanks, 
    > 
    > Nicole
    > 
    > --
    > Nicole Haywood                          Phone: +61 2 93515504
    > Network Security Officer                Fax:   +61 2 93515001
    > University of Sydney                    Email: N.Haywoodat_private
    > 
    > 
    > -----------------------------------------------------------------
    > This list is provided by the SecurityFocus ARIS analyzer service.
    > For more information on this free incident handling, management 
    > and tracking system please see: http://aris.securityfocus.com
    
    -- 
    jamie rishaw <jamieat_private>
    sr. wan/unix engineer/ninja // playboy enterprises inc.
    [opinions stated are mine, and are not necessarily those of the bunny]
    
    "UNIX was not designed to stop people from doing stupid things, because
     that would also stop them from doing clever things." -- Doug Gwyn
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Sun Sep 16 2001 - 22:58:42 PDT