Please follow
http://www.nist.gov/oles/forensics-2012.cfm
.