Microsoft PowerPoint Documents

Description	Microsoft PowerPoint is a presentation creator developed by Microsoft. This table captures documents created with PowerPoint, extracted from the filesystem and carved from unallocated space.
Recovery method	Parsing and carving

Attribute	Description
Filename	The name of the document.
File	The actual file.
File System Last Modified Date/Time - UTC (yyyy-mm-dd)	The date and time that the file was last modified on the filesystem.
File System Last Accessed Date/Time - UTC (yyyy-mm-dd)	The date and time that the file was last accessed on the filesystem.
File System Created Date/Time - UTC (yyyy-mm-dd)	The date and time that the file was created on the filesystem.
Size (Bytes)	The size of the document.
Title	The title of the file.
Saved Size (Bytes)	The size of the document that was recovered. Large documents may not be fully recovered.
Subject	The subject of the file.
Authors	The authors of the file.
Keywords	The keywords in the metadata of the file.
Comment	The comments in the metadata of the file.
Last Author	The last author to edit the document.
Last Printed Date/Time - UTC (yyyy-mm-dd)	The date and time that the document was last printed, extracted from metadata within the document.
Last Modified Date/Time - UTC (yyyy-mm-dd)	The date and time that the document was last modified, extracted from metadata within the document.
Created Date/Time - UTC (yyyy-mm-dd)	The date and time that the document was created, extracted from metadata within the document.
Company	The company metadata.
MD5 Hash	The MD5 hash of the contents of the document.
SHA1 Hash	The SHA1 hash of the contents of the document.

Additional Information
For information about supported formats, see Supported media and file types.