IT Forensics · OSINT
Analysing document metadata using OSINT – utilising hidden document information for forensic purposes
Office and PDF documents often contain hidden metadata, such as the author, the software used to create the document or its editing history, which can provide additional information relevant to forensic analysis.
As part of ongoing cases, we carry out a structured analysis of the metadata of documents in our possession or those available to the public.
Why LanCologne?
Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.
Our OSINT investigations are always carried out as a complementary component to existing IT forensic, legal or internal corporate enquiries. Every step of the investigation and every piece of digital evidence found is documented and, where technically possible, archived to ensure traceability even if the original online content is subsequently altered or deleted.
Our services
We carry out a technical analysis of the metadata of a relevant document and document the information obtained in a manner that is forensically verifiable.
Typical areas of application
This is how a document metadata analysis is carried out
The relevant document is examined using forensic tools to check for any metadata it contains; details regarding the author, the software used to create it and its editing history are documented and, where possible, cross-checked against other publicly available information.
Why is the analysis of document metadata relevant in a forensic context?
Hidden metadata can provide important clues as to a document’s true origin or editing history.
Furthermore, discrepancies between the visible information and the metadata contained within may indicate that the data has been tampered with at a later stage.
Frequently Asked Questions
LanCologne – IT Forensics OSINT Cologne
Do you require a professional OSINT investigation into „OSINT-based analysis of document metadata"? LanCologne can assist you with the transparent, documented analysis of publicly available digital sources to support your IT forensic, legal or internal corporate enquiries.
Related to this topic
- Searching public code repositories using OSINT – Forensically tracing accidentally published source code
- Identifying exposed databases using OSINT – forensically tracing publicly accessible databases
- Identifying IoT devices using OSINT – Forensically tracing publicly accessible connected devices
- Conducting a forensic WHOIS search – analysing domain owner information in a forensically verifiable manner