Forensic investigation of Microsoft PowerPoint files

    Research output: Contribution to journalArticlepeer-review

    13 Citations (Scopus)

    Abstract

    Nowadays, many electronic documents reside in individual systems and on public networks. Electronic documents contain important information such as private data and trade secrets. Because of this, electronic documents can be used as digital evidence in forensic investigations. Until now, forensic examiners have looked at the contents of an electronic document using specific applications, a procedure which fails to provide them with information about how an electronic document was created. Research into the process by which an electronic document is written can help forensic examiners discover the relationships among several electronic documents and the traces of past work in some special cases. This paper demonstrates new methods for investigating Microsoft PowerPoint files that include some useful information about their own writing process.

    Original languageEnglish
    Pages (from-to)16-24
    Number of pages9
    JournalDigital Investigation
    Volume6
    Issue number1-2
    DOIs
    Publication statusPublished - 2009 Sept

    Bibliographical note

    Funding Information:
    This research was supported by Bio R&D program through the Korea Science and Engineering Foundation funded by the Ministry of Education, Science and Technology (M10640030004-08N4003-00410).

    Keywords

    • Digital forensics
    • Microsoft PowerPoint file
    • Object identifier
    • Residual information
    • Slide identifier

    ASJC Scopus subject areas

    • Pathology and Forensic Medicine
    • Information Systems
    • Computer Science Applications
    • Medical Laboratory Technology
    • Law

    Fingerprint

    Dive into the research topics of 'Forensic investigation of Microsoft PowerPoint files'. Together they form a unique fingerprint.

    Cite this