Maksym Boiko, mboiko25@gmail.com, Kyiv, 2020
Remark.
Revision Save IDs (RSIDs) are an interesting thing within OOXML-files. These
tags can help an investigator to compare several Microsoft Office documents
more deeply and to define a parent document for some text.
There were not so many works
on this theme. Maybe, the best one is “Forensic Analysis of OOXML Documents” (E.
Didriksen). But if you want to comprehend all the subtleties of WordProcessingML
document’ structure, you need to have read some parts of “Standard ECMA-376
Office Open XML File Formats”. Of course, you need to investigate a lot of
OOXML-files yourself as well.
I hope I will have more time to present a more comprehensive work with practical cases in the
future.
