A leaked contract PDF contained a password-protected ZIP file inside a hidden attachment. The ZIP held the real agreement. Scan for attachments even if none are visible – sometimes they're hidden but not deleted. LAYER 7: THE DELETED & THE UNREFERENCED (Forensic Layer) When you edit a PDF, old data often remains in the file structure but is no longer "pointed to" by the viewer.
Go forth and read between the lines.
![End marker] Disclaimer: This guide is for educational and ethical investigation of documents you own or have permission to analyze. Unauthorized access to hidden data in PDFs may violate laws.
In Adobe Acrobat Pro: View > Show/Hide > Navigation Panes > Layers
File > Properties (or Ctrl/Cmd + D in Adobe/Acrobat)
Click anywhere. If a cursor appears, there's a hidden input box. Use Prepare Form tool to reveal all fields.
Comment Pane or View > Show Markup
Every edit leaves a trail. Every conversion adds metadata. Every comment is a potential confession.
View > Show/Hide > Navigation Panes > Attachments
Advanced PDFs can run scripts. To inspect: Edit > JavaScript > Document JavaScripts