IT Forensics · OSINT

Analysing PDF metadata using OSINT – Making forensic use of hidden PDF information

PDF documents often contain hidden metadata, such as the author, the software used to create them or previous file names, which can provide additional information relevant to forensic analysis.

Enquire without obligation

As part of existing cases, we carry out a structured analysis of the metadata of publicly available or submitted PDF documents.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

Our OSINT investigations are always carried out as a complementary component to existing IT forensic, legal or internal corporate enquiries. Every step of the investigation and every piece of digital evidence found is documented and, where technically possible, archived to ensure traceability even if the original online content is subsequently altered or deleted.

Our services

We carry out a technical analysis of the metadata from a relevant PDF document and document the information obtained in a manner that is forensically verifiable.

Typical areas of application

Analysis of metadata from publicly available or submitted PDF documents
Supplementing investigations into fraud and plagiarism
Support with verifying the origin of documents
Documentation for legal proceedings
Judicial and non-judicial expert reports
Collaboration with solicitors

This is how a PDF metadata analysis works

The relevant PDF document is examined using forensic tools to check for any metadata it may contain; details regarding the author, the software used to create the document and its editing history are documented and, where possible, cross-referenced with other publicly available information.

Why is the analysis of PDF metadata relevant in a forensic context?

Hidden metadata can provide important clues as to the actual origin or editing history of a PDF document.

Furthermore, discrepancies between the visible information and the metadata contained within may indicate that the data has been tampered with at a later stage.

Frequently Asked Questions

Can PDF documents that have already been cleaned up also be analysed?+
If metadata has been deliberately removed, correspondingly less information is available; we document this transparently.
Are protected PDF documents also analysed?+
Only to the extent permitted by law and technically feasible, for example where a password is provided or with the client’s consent.
Is this analysis combined with the general document metadata analysis?+
It is the same methodology; we apply it consistently, regardless of the specific file format.

LanCologne – IT Forensics OSINT Cologne

Do you require a professional OSINT investigation into „OSINT-based analysis of PDF metadata"? LanCologne can assist you with the transparent, documented analysis of publicly available digital sources to support your IT forensic, legal or internal corporate enquiries.

Get in touch now