Most people are unaware that the documents they create and edit using Microsoft’s Office suite of products contain a large amount of data related to the documents life-cycle. While usually benign and not very interesting, this data can become quite valuable in a forensic investigation. It can help establish timetables of when a file was last accessed or modified. An examiner can even extract the last few users who edited the file and the previous locations the document was stored.