Introduction
Forensic file handling vs. protecting privacy
Types of PII
Definite PII
Social Security Numbers
Bank Account information
Credit Card information
Passwords
Possible PII - depends on the context
Full names
Addresses
Phone numbers
Email addresses
Distinguishing between false positives and actual PII
Hex values
Visible vs. invisible data layers
Tools
Autopsy
Python
Python libraries
Adobe Photoshop
Adobe Acrobat
HxD or other hex editor
Identify PII with Autopsy
Add new regular expressions to find specific types of PII
Extract files from disk image
Redact PII with Python
Use regex to find
Output files with "_redacted" suffix
Add original file extension to any converted formats (e.g. file_doc.docx)