Comprehensive approach to discovering assembly in electronic and hybrid documents

Abstract

In the current context of rapid technological advancement, electronic documents are widely used across various domains. One of the most common formats of electronic documents is the PDF (Portable Document Format), which is utilized for creating, storing, and transmitting documents in a fixed-layout form. At the same time, the use of modern software tools for editing electronic documents creates opportunities for their falsification, in particular through document montage, including the insertion of textual fragments, alteration of document requisites, or their addition/modification prior to printing. This article addresses the detection of document montage in electronic and hybrid documents within the framework of a comprehensive approach involving both forensic document examination and computer forensic examination. Particular attention is paid to the examination of PDF files as one of the most widely used formats in contemporary document workflow. The study analyzes the possibilities of identifying text alterations, insertion or modification of individual requisites, and changes to graphical elements carried out in the digital environment prior to printing. The purpose of the study is to analyze contemporary approaches to the detection of document montage in electronic and hybrid documents through the application of methods of forensic document examination and computer forensic examination. The methodological basis of the research includes methods of analysis, generalization, and forensic examination of documents, in particular the analysis of graphical characteristics of text, document structure, and metadata of electronic files. The study identifies characteristic indicators of document montage that can be established both in the electronic PDF file and in the printed hard copy of the document. The conclusions. It is demonstrated that the combined application of computer forensic and forensic document examination methods enables effective detection of alterations introduced into a document prior to printing and enhances the evidential value and reliability of expert conclusions.