| Expert Talk Free Expert Tips and Advices |
Last 10 Authors - Microsoft Word How ToMany computer forensic examiners and attorneys are aware that metadata is valuable to many corporate cases. Metadata is the information stored within Microsoft Office and other files that can tell when files were created, edited, printed, stored and dAn area of a Microsoft Word file commonly referred to as metadata is 'Last 10 Authors'. Last 10 authors/locations and the data captured can be valuable in a computer forensic examination or electronic discovery project. A common assumption amongst litigation support professionals and attorneys is that last 10 authors will be extracted during an electronic discovery process. In fact, last 10 authors isn't included in the OLE stream metadata and is not extracted by common electronic discovery products or vendors. The reason this information isn't available during normal metadata extraction processes (OLE stream) is that last 10 authors isn't stored in the same location as the other OLE metadata. Additionally, the tools provided by Microsoft to extract metadata (which many software developers use) doesn't include last 10 authors. Once an attorney realizes what information can be available from last 10 authors and l We were recently hired to review a couple computer systems and a USB drvie of a corporate employee. We were told that the two computers provided were the only systems that were used by the employee. We were a bit suspicious when we were told the laptop was used whenever the suspect wasn't in the office. Our suspicions were a result of determining the laptop was 5 years old and contained partitions that included DOS and Windows 3.1. It was the last 10 authors that allowed us to provde that not only had the laptop not been recently used to create, modify or save any work related files last 10 authors also allowed us to identify two other systems the individual had access to that were never produced for the case. In addition to saving the location of the last 10 authors and locations when the user saves the file, it is also possible that the last 10 authors was updated during an autosave process. Microsoft Word will often autosave the contents of a file while the users is working on a document. Autosave will store this information in the background as the user works. There are dozens of examples like this where last 10 authors 'metadata' can be used to help with a conviction or judgement. Informaiton can work for or against an individual and their legal representation. When it is determined that metadata is priveledge information or for any reason should be excluded, don't forget about last 10 authors. Not all electronic discovery vendors or computer forensic exaimers include last 10 author data in their processes. Pinpoint Labs has software and services geared towards analyzing and scrubbing last 10 authors data. In closing, metadata is valuable information that can help establish evidence timelines, file location and dozens of other facts related to a case. The last 10 authors metadata is extremely valuable but not easily accessible to common computer forensic and electronic discovery processes. Make sure you incorporate last 10 authors in your next project. Pinpoint Labs offers MetaViewer and MetaDiscover software tools as well as metadata consulting services. Article Directory: http://www.articledashboard.com About the author: Jon Rowe is the President of Pinpoint Labs and a Certified Computer Examiner. To learn more about Pinpoint Labs click herePinpoint Labs Website - Computer Forensics Software and Services You can get a unique content version of this article. Permalink: http://expert-talk.com/tips/34/last-10-authors-microsoft-word-how-to-22034.htm Related Tips and Advices
| Related Tags |
SEND A COMMENT
PLEASE READ: All comments must be approved before appearing in the thread; time and space constraints prevent all comments from appearing. We will only approve comments that are directly related to the article, use appropriate language and are not attacking the comments of others.