Μέθοδοι διερεύνησης, ανάκτησης και απαλοιφής μεταδεδομένων σε γνωστά λειτουργικά περιβάλλοντα
Αλέξης, Χρήστος Α.
In the present thesis for the acquisition of a Master of Science Degree, we study the metadata in Microsoft Office, PDF and other types of files, in various operating systems, mainly the MS Windows and Linux. Initially, we define the meaning of metadata and we present their usefulness in forensic analysis. Subsequently, we analyze the types of metadata in programs like the Microsoft Office suite, Open Office, Adobe Reader and the kind of information they reveal. Afterwards, we discuss incorporated tools, which exist in different applications, for the acquisition and removal of metadata. Finally, we study the cases of metadata extraction and deletion, with the help of various commercial and open-source tools.