Switch to full style
Anything related to computer forensics (new section!)
Post a reply

File Information Block for .docx files

February 15th, 2016, 12:12

Does anyone know of a good reference for the forensic breakdown of a Mirosoft Word .docx file?

Re: File Information Block for .docx files

February 15th, 2016, 23:15

if you google without quotes for the string "forensic breakdown of a Mirosoft Word .docx file" I think it should be enough.

https://docs.marklogic.com/guide/search-dev/binary-document-metadata looks pretty good.

if you need specifics, repost.
cheers

Re: File Information Block for .docx files

February 17th, 2016, 8:18

HaQue wrote:if you google without quotes for the string "forensic breakdown of a Mirosoft Word .docx file" I think it should be enough.

https://docs.marklogic.com/guide/search-dev/binary-document-metadata looks pretty good.

if you need specifics, repost.
cheers


Brian winning at life another time :D

Re: File Information Block for .docx files

February 20th, 2016, 17:53

.docx? or do you mean .doc: https://msdn.microsoft.com/en-us/librar ... 12%29.aspx
Attachments
Capture.PNG
Post a reply