Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: XPS Metadata - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
XPS Metadata

To answer a question I was asked recently: XPS documents contain metadata too.

As mentioned in diary entry Analyzing XPS files, XPS files follow the Open Packaging Conventions specification. They contain file _rels/.rels (looking inside with

Making it more readable with

File _rels/.rels informs us that docProps files contain metadata.



Didier Stevens
Senior handler
Microsoft MVP


649 Posts
ISC Handler
Jul 4th 2018

Sign Up for Free or Log In to start participating in the conversation!