PDF Generator Fingerprints: What Software Made This File (And Where It Lies)

A PDF's metadata contains fingerprints of the software used to generate it, including the 'Creator' and 'Producer' fields. These fields can be manipulated, making them unreliable for verification. A more thorough analysis of the PDF's structure is needed to determine its authenticity. This involves examining how the file lays out its objects, embeds fonts, and joins pages together. A risk team can use this analysis to verify the software that claims to have made a file.