Detect-It-Easy/db/PDF/format_Tools.2.sg

// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("format", "pdf");

function detect() {
    var list_creator = PDF.getStringValuesByKey("/Creator");

    for (var i = 0; i < list_creator.length; i++) {
        _setResult("tool", "Creator", PDF.getHeaderCommentAsHex(), list_creator[i]);
    }

    var list_producer = PDF.getStringValuesByKey("/Producer");

    for (var i = 0; i < list_producer.length; i++) {
        _setResult("tool", "Producer", PDF.getHeaderCommentAsHex(), list_producer[i]);
    }
}