Basic

accessed

Last time the object was read from evidence.

created

Time the item was created on the evidence.

modified

Last Time the item was modified.

Communication

communication:date

Date the communication represented by the item was sent.

PDF

pdf:docinfo:modified

Last time content of the PDF was modified.

pdf:docinfo:created

Date of the creation of the content of the PDF.

pdf:xmp:createdate

Date of the creation of the content of the PDF. (following the XMP format)

pdf:xmp:modifydate

Last time the content of the PDF was modified. (following the XMP format)

pdf:xmp:metadatadate

Last time the metadata information of a PDF was modified. (following the XMP format)