Document Analysis

Information

KringleCon - Courtyard

Exif Metadata?

Conversations

Solution

All the file dates are the same:

Ran exiftool on the first file, saw that the File Name and the Last Modified By attributes both existed.

Figured out that I could list only specified attrs by indicating them with -.

Tested listing each File Name and Last Modified by with bash script and echoed newlines so I could see which ones went together.

Ran the full command:

for i in {1..25]; do echo ""; exiftool -FileName -LastModifiedBy 2021-12-0$i.docx; echo ""; done

Nothing was found for files 01-09, but I need to remove the leading 0 to get the rest.

for i in {10..25]; do echo ""; exiftool -FileName -LastModifiedBy 2021-12-$i.docx; echo ""; done

Ok, It was santa clause on all of them. Now I'll just compare the create date and the last modified time.

for i in {1..9]; do echo ""; exiftool -FileName -CreateDate -ModifyDate 2021-12-0$i.docx; echo ""; done

Those were all matching, through 09.docx. Now for 10-25.

for i in {10..25]; do echo ""; exiftool -FileName -CreateDate -ModifyDate 2021-12-$i.docx; echo ""; done

That's it! The 2021-12-21.docx file was the one that was modified, it was changed on 12/24/2021.

Next: term-3