Re: Forensics on Word Documents

From: Jonathan Bloomquist (bocasolutionsat_private)
Date: Mon Sep 17 2001 - 12:45:41 PDT

  • Next message: Cory McIntire: "New Worm ?"

    i agree - strings is also available for win32 from
    sysinternals:
    
    http://www.sysinternals.com/ntw2k/source/misc.shtml
    
    --- jamie rishaw <jamieat_private> wrote:
    > running it through UNIX 'strings' is always one of
    > the first things I
    > do to any document or file that I don't know of --
    > it's invaluable in
    > a lot of things..
    > 
    > jamie
    > 
    > On Fri, Sep 14, 2001 at 03:57:56PM +1000, Nicole
    > Haywood wrote:
    > > I've got to do a comparison on a couple of
    > versions of word documents to try to determine which
    > was created first etc.
    > > 
    > > Is there anything any one can suggest I look at in
    > a word document other than creation date and
    > revisions etc.
    > > 
    > > Thanks, 
    > > 
    > > Nicole
    
    
    __________________________________________________
    Terrorist Attacks on U.S. - How can you help?
    Donate cash, emergency relief information
    http://dailynews.yahoo.com/fc/US/Emergency_Information/
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue Sep 18 2001 - 08:12:31 PDT