Skip to main content


PDF Forensic Analysis and XMP Metadata Streams

By Articles

PDF forensic analysis is a type of request we encounter often in our computer forensics practice. The requests usually entail PDF forgery analysis or intellectual property related investigations. In virtually all cases, I have found that the PDF metadata contained in metadata streams and the document information dictionary have been instrumental. I will provide a brief overview of these metadata sources and then provide an example about how they can be useful during PDF forensic analysis…

Read More