1. FOCA 2.5.5
Chema Alonso

2. Whats a FOCA?
3. FOCA on Linux?
4. FOCA + Wine
5. Previously on
FOCA.
6. FOCA 0.X
7. A documentis
Whatyousee
And whatyoudont
Templatepaths
Usersworked in it.
Departments.
File & Printing Servers
VersionHistory
Embedded files

8. What kind of data can be found?
Metadata:
Information stored to give information about the document.
For example: Creator, Organization, etc..
Hidden information:
Information internally stored by programs and not editable.
For example: Template paths, Printers, db structure, etc
Lost data:
Information which is in documents due to human mistakes or negligence, because it was not intended to be there.
For example: Links to internal servers, data hidden by format, etc
9. Metadata
Metadata Lifecycle
Wrongmanagement
Badformatconversion
Unsecureoptions
Wrongmanagement
Badformatconversion
Unsecureoptions
New apps
orprogram
versions
Searchengines
Spiders
Databases
Embedded
files
Hiddeninfo
Lost Data
Embedded
files
10. MetadataRisks
Secret relationships
Government & companies
Companies & providers
Piracy discovery
Reputation
Social engineering attacks
Targeting Malware
11. 2003 MS Word bytes Tony Blair
12. Targeting Malware
13. Targeting Malware
14. Electing the entry point
15. Why you should be using FS
16. Linux installation guide
17. Social Engineering Attack
18. Metadatacreatedby Google
19. Lost Data
20. Lost data everywhere
21. Metadata in SearchEngines
22. Pictureswith GPS info..
EXIFREADER
http://www.takenet.or.jp/~ryuuji/
23. Even Videos withusers
http://video.techrepublic.com.com/2422-14075_11-207247.html
24. And of course, printedtxt
25. OLE Streams
In MS Office binaryformat files
Storeinformationaboutthe OS
Are notcleanedwiththese Tools
FOCA findsthisinfo
26. FOCA: File types supported

Office documents:

27. Open Office documents. 28. MS Office documents. 29. PDF Documents. 30. XMP. 31. EPS Documents. 32. Graphic documents. 33. EXIFF. 34. XMP. 35. Adobe Indesign, SVG, SVGZ (NEW)