Project

PSWriteOffice

PowerShell document automation across Word, Excel, PowerPoint, PDF, Reader, Confluence, Visio, and open text formats.

View on GitHub Releases Get package
Stars 161
Forks 15
PowerShell Gallery downloads 158,661
Release v3.0.7
Language: C# Updated: 2026-09-19

API Reference

Cmdlet

Get-OfficeProvenance

Namespace PSWriteOffice
Inputs
System.String
Outputs
OfficeIMO.Provenance.OfficeProvenanceAssessmentReport
Source
Sources/PSWriteOffice/Cmdlets/Security/GetOfficeProvenanceCommand.cs:25 Edit on GitHub

Collects structural, text-integrity, and optional provider verification evidence for a file.

Remarks

The result keeps carrier discovery, cryptographic verification, and provider signals separate; it does not infer authorship from their presence or absence.

Examples

Authored help example

Inspect embedded provenance without invoking an external verifier.

PS>


$evidence = Get-OfficeProvenance -Path .\Published\cover.png
            $evidence.Structural | Select-Object Format, HasC2paManifest
            $evidence.TextIntegrity

Ask an explicitly supplied c2patool installation to verify Content Credentials.

PS>


$evidence = Get-OfficeProvenance -Path .\Published\cover.png -C2paToolPath C:\Tools\c2patool.exe
            $evidence.Verification | Select-Object Status, ProviderName, Findings

Network access remains disabled unless enabled in the supplied assessment options.

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Get-OfficeProvenance [-C2paToolPath <String>] [-Options <OfficeProvenanceAssessmentOptions>] -Path <String> [-SignalDetector <IOfficeProvenanceSignalDetector[]>] [<CommonParameters>]
#
Parameter set: All Parameter Sets

Parameters

C2paToolPath String optionalposition: namedpipeline: False
Explicit c2patool executable path or controlled command name used for cryptographic verification.
Options OfficeProvenanceAssessmentOptions optionalposition: namedpipeline: False
Structural, text-integrity, and provider verification limits and policy.
Path String requiredposition: 0pipeline: True (ByValue)aliases: FilePath
Asset or document path to inspect.
SignalDetector IOfficeProvenanceSignalDetector[] optionalposition: namedpipeline: False
Optional provider-specific watermark or disclosure detectors.

Outputs

OfficeIMO.Provenance.OfficeProvenanceAssessmentReport