Data Forensics - Revision history

Ben at 20:14, 27 May 2014

2014-05-27T20:14:25Z

Ben at 20:12, 27 May 2014

2014-05-27T20:12:34Z

Ben: Created page with "This is stored in the file's metadata and it can be accessed with specialised software. Knowing who and when created a particular document may help you authenticate it or iden..."

2014-05-12T21:01:30Z

Created page with "This is stored in the file's metadata and it can be accessed with specialised software. Knowing who and when created a particular document may help you authenticate it or iden..."

New page

This is stored in the file's metadata and it can be accessed with specialised software. Knowing who and when created a particular document may help you authenticate it or identify it as a fake. You should also be aware that this metadata is recorded on the files you create.

Media: Have a read about how the UK went to war over a dossier suggesting that Saddam Hussein had capabilities to deliver long range missiles within 45 minutes. Post factum it was discovered that the intelligence was based on a student's postgraduate thesis. The discovery was made by accessing the document's metadata which the government helpfully posted online http://www.casi.org.uk/discuss/2003/msg00457.html

The easiest way to view the metadata of a document is to select it in Windows Explorer, bring up the menu with a right-click and select 'Properties'. Then go to the 'Details' tab to view this information. Windows also allows you to remove the document's metadata by clicking on 'Remove Properties and Personal Information'.

<img>

There are many free and commercial tools that read and allow you to modify the metadata of a document. The majority concentrate on digital images, audio and video data. However some tools can also access, delete or edit a document's metadata.

<img>

@@ Line 9: / Line 9: @@
 There are many free and commercial tools that read and allow you to modify the metadata of a document. The majority concentrate on digital images, audio and video data. However some tools can also access, delete or edit a document's metadata.
-Exercise: Install and [[http://www.sno.phy.queensu.ca/~phil/exiftool/|Exiftool]] by Phil Harvey to see what kind of meta data is collected in your files.
+Exercise: Install and [http://www.sno.phy.queensu.ca/~phil/exiftool/ Exiftool] by Phil Harvey to see what kind of meta data is collected in your files.
 [[File:metadata5.jpg|metadata 5]]

@@ Line 1: / Line 1: @@
-This is stored in the file's metadata and it can be accessed with specialised software. Knowing who and when created a particular document may help you authenticate it or identify it as a fake. You should also be aware that this metadata is recorded on the files you create.
+This is stored in the file's metadata and it can be accessed with specialized software. Knowing who and when created a particular document may help you authenticate it or identify it as a fake. You should also be aware that this metadata is recorded on the files you create.
-Media: Have a read about how the UK went to war over a dossier suggesting that Saddam Hussein had capabilities to deliver long range missiles within 45 minutes. Post factum it was discovered that the intelligence was based on a student's postgraduate thesis. The discovery was made by accessing the document's metadata which the government helpfully posted online http://www.casi.org.uk/discuss/2003/msg00457.html
+'''Media:''' Have a read about how the UK went to war over a dossier suggesting that Saddam Hussein had capabilities to deliver long range missiles within 45 minutes. Post factum it was discovered that the intelligence was based on a student's postgraduate thesis. The discovery was made by accessing the document's metadata which the government helpfully posted online http://www.casi.org.uk/discuss/2003/msg00457.html
 The easiest way to view the metadata of a document is to select it in Windows Explorer, bring up the menu with a right-click and select 'Properties'. Then go to the 'Details' tab to view this information. Windows also allows you to remove the document's metadata by clicking on 'Remove Properties and Personal Information'.
-<img>
+[[File:properties5.jpg|properties 5]]
 There are many free and commercial tools that read and allow you to modify the metadata of a document. The majority concentrate on digital images, audio and video data. However some tools can also access, delete or edit a document's metadata.
-<img>
+Exercise: Install and [[http://www.sno.phy.queensu.ca/~phil/exiftool/|Exiftool]] by Phil Harvey to see what kind of meta data is collected in your files.