ATTENTION: The new home of the Digital Forensics Wiki is at https://forensicswiki.xyz/. Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn
PowerPoint Presentation (PPT)
The PowerPoint Presentation (PPT) file format has the .ppt extension. This file type originates from Microsoft PowerPoint. However, other presentation software can be used to display these files as well. These include:
The object stream of the OLECF containing a PowerPoint presentation contains the string "PowerPoint Document" with some version.
PowerPoint 97-2003 presentation
The PowerPoint 97-2007 Binary File format is stored in the OLECF using multiple streams:
- ... stream
See Word Document (DOC). Note: perhaps this section should be moved to a separate section about Microsoft Office encryption