TU Metashield Clean-Up Online: find out what data your documents expose
Share
One of the projects that we have started this year to take care of from Tu.com is MetaShield Protector. The MetaShield Protector MetaShield Protector family helps companies and individuals prevent company information leaks by cleaning up metadata, hidden information and lost data. I’ve talked about this a lot over the years on this blog and at many conferences.
For the newbies – and for the not so newbies – I wanted to make this article to inform you that you have the MetaShield Clean-Up Online service available at the new URL, which is: https://metashieldclean-up.tu.com, where you can use it for free to find out what data your office documents, your photos, or the files you share in general with people through email, or with the whole world through the publication of them on the web.
Figure 2: TU Metashield Clean-UP Online
To show you how this service works, I have searched for an Excel file that I recently received and uploaded it for analysis.
Figure 3: Analysis of Metadata, Hidden Information and Lost Data of an Excel document with MetaShield CleanUP Online
In it you can see how there is a lot of information, such as the name of the system user who created the file.
Figure 4: User name and document type
Information about the company that licensed the version of Excel with which this document was created also appears, which is quite curious and may give more information than necessary.
Figure 5: Company that has licensed the software
Another data is who modified the document, which is another user of the company different from the one who created it, which gives us a file editing history, and two names of users of that company, just by having received an Excel document.
Figure 6: User who modified Excel
But the information that appears does not stop there, and we can discover printer brands and models, as well as software versions.
I have already talked a lot about the importance of this information that many times companies hand over without any care, and how a company that shares deans, or hundreds of documents a day, is leaking a lot of information of the network and security structure of the company.
In TU Metashield we also have solutions to apply in Office 365 email, in web server management, and even to use via API in your own document management applications, so if you want to see collaboration possibilities, or want to use our services, you can contact us.
Figure 9: Metadata and National Security Schema
All these tools are fundamental to implement a Metadata Security Policy to comply with the National Security Scheme, set by the national CCN-CERT in Spain, and for similar policies throughout the world.
Evil Greetings!
Original content by “El lado del mal“
Chief Digital Officer of Telefónica and CEO of Telefónica Innovación Digital.
www.elladodelmal.com
