reading-location-position-value-in-microsoft-word-documents,-(mon,-aug-25th)

While preparing for the GX-FE [1], I began examining the “Position” value within the registry that indicates to Microsoft Word where you “paused”. This functionality is something many users of Word have encountered multiple times and is discussed in FOR500: Windows Forensic Analysis [2].


Leave a Reply

Your email address will not be published. Required fields are marked *

Share This