[prev in list] [next in list] [prev in thread] [next in thread] 

List:       forensics
Subject:    Re: Tracing Excel Worksheets beyond metadata
From:       Christoph Gruber <list () guru ! at>
Date:       2006-07-07 21:00:50
Message-ID: 200607072300.51104.list () guru ! at
[Download RAW message or body]

On Monday 03 July 2006 15:47 inspector@tester.pik wrote:
> Hello,
>
> We have an Excel XP version workbook with three worksheets and we
> have to trace which worksheet came  from which user.
>
> The Metadata shows which user last opened the file and saved the
> file, but not specifically which sheet.
>
> We've tried to replicate the environment by creating a virtualPC lab
> and making hexadecimal comparisons of the different sheets but not
> with much success.
>
> Any tools, suggestions or known flags of Excel data would be
> appreciated.
>
> Thanks in Advance !

I think it won't be a big issue to write some lines of VBA to be 
triggered by the sheet.change() event which writes the user to a 
certain structure or a hidden field.

-- 
Christoph Gruber
"Die Freiheit gefällt allen, am meisten aber denen, die den anderen 
keine lassen wollen." Francesco Domenico Guerrazzi (1804-73)

[prev in list] [next in list] [prev in thread] [next in thread]