PDF Forensic Authentication Analysis - 21/06/2026 21:13 EDT

I have a set of six to seven small PDFs that need a proper forensic work-up. The first thing I need to confirm is whether each file started life as a scan or carries a native digital signature. Beyond that, my main interest is in uncovering the human footprint inside the documents—who may have edited, signed, or otherwise touched them, along with the precise timestamps for creation, modification, and signing events.

You can use any combination of metadata extraction, XMP parsing, digital-signature validation, hash comparison, or hex-level inspection—whatever yields the clearest chain of custody. If you spot clues that point to the specific software or hardware used, include them; I’m not entirely sure I need that layer, but I’d like to see what you can discover.

Deliverables
• A concise executive summary highlighting the key findings for each file
• A full technical report that details methods, tools, metadata fields, and signature validation steps, plus any artefacts or screenshots that support your conclusions

I’ll supply the PDFs once we start; you return the two-tier report set and be prepared to walk me through the evidence if anything needs clarification.