Microsoft Office Metadata - What every attorney should know about the hidden information in their cl

Microsoft Word contains hidden information regarding a documents characteristics, when it was created, edited and which author modified the document. In addition to the visible text in a Microsoft Word document there is also information which isn't visible that track the document through creation and revision.

In a legal matter electronic files are considered evidence. It would stand to reason that metadata in Microsoft Word files is important since it can explain the timeline of events and other details related to the evidence.

All Microsoft Office documents contain metadata and there are dozens of other file types which also store valuable information about the file. These topics will be covered in a different article.

Many people think of emails when metadata is mentioned. It is important to note that the fields in an email (i.e. 'To', 'From', 'Subject' etc.) are actually database fields and not the same as the hidden information contained in other file types.

In addtion to Microsoft office Word metadata there is file system metadata. File system metadata is stored outside of the Microsoft Word.

File system metadata is stored in the File Allocation Table (FAT). When viewing files in Windows Explorer the dates, times, size of the file is the file system metadata.

When this data is altered through a copy process it is often referred to as 'spoliation' in a legal case. Spoliation can cause important evidence to be thrown out when it is argued the files were altered during collection.

Since the job of the collection phase is to preserve potential evidence spoliation can be a serious issue. Pinpoint Labs created a program called SafeCopy to allow users to copy files without altering metadata.

The following list represents a collection of the hidden information in a Microsoft Word document:

MICROSOFT WORD METADATA FIELDS - File Name, Title, Author, Comments, App Name, Version Date, Created Date, Last Printed, Date Last Saved, Total Edit Time, Template, Shared, Subject, Category, Company, Keywords, Manager, Last Saved By, Word Count, Page Count, Paragraph Count, Line Count, Character Count, Chars, Byte Count, Presentation Format, Slide Count, Note Count, Hidden Slides, Multimedia Clips, Last 10 Authors, Routing Slip, Track Changes, Fast Saves, Hidden text, Graphics, Hyperlinks, Document Variables, Include Fields.

A program which can quickly display information related to file system and Microsoft Office metadata is available through Pinpoint Labs and is called MetaViewer. MetaViewer is a great tools for computer forensic examiners and legal professionals who need to quickly view metadata and hash values. You can download MetaViewer from the Pinpoint Labs website.

Article Source: http://www.article-voip.com

Metaviewer and SafeCopy are free tools and located hereMetaViewer and SafeCopy Forensic Software

Please Rate this Article

Not yet Rated

Click the XML Icon Above to Receive Computers Articles Via RSS!

Additional Articles From - Home | Z-a Articles | Computers

Free Useful Advice on Background Check - By : JackCarlsonpnp
The Information You Need To Know About Private Investigation - By : JohnJames
The Leading Herbal Online Marketing Program. - By : Preeti Dutta
Smarter Method to Track Employee Time - By : jefery
Guides to Buy better laptop battery - By : roslin
Tips to improve ipod's battery life time - By : bonniee
Private Investigation Does Not Need To Be a Dream with These Tips - By : JackCarlsonpnp
Best HDTV- The Best is Right Now - By : Robert D. Thomson
How to Choose the Best HDTV Antenna - By : Robert D. Thomson
Ideal Reason to Create a Backup of Your Software and Data By Harpreet Kaur - By : Harpreet Kaur

	Print This Article
	Post Comment
	Add To Favorites
	Email to Friends
	Ezine Ready

Submit Articles
Member Login
Top Authors
Most Popular Articles
Submission Guidelines
Ezine Notifications
Article RSS Feeds

About Us
Link to Us
Contact Us
Privacy Policy
Terms of Service

[SAPE ADS]