Skip to content

Event field dictionary

patrickdalla edited this page May 7, 2024 · 3 revisions

Basic

accessed

Last time the object was read from evidence.

created

Time the item was created on the evidence.

modified

Last Time the item was modified.

Communication

##communication:date Date the communication represented by the item was sent.

#PDF ##pdf:docinfo:modified Last time content of the PDF was modified. ##pdf:docinfo:created Date of the creation of the content of the PDF. ##pdf:xmp:createdate Date of the creation of the content of the PDF. (following the XMP format) ##pdf:xmp:modifydate Last time the content of the PDF was modified. (following the XMP format) ##pdf:xmp:metadatadate Last time the metadata information of a PDF was modified. (following the XMP format)

Clone this wiki locally