Get-OfficeProvenance
Collects structural, text-integrity, and optional provider verification evidence for a file.
Syntax
Get-OfficeProvenance
[-C2paToolPath <String>]
[-Options <OfficeProvenanceAssessmentOptions>]
[-Path] <String>
[-SignalDetector <IOfficeProvenanceSignalDetector[]>]
[<CommonParameters>]#All Parameter SetsDescription
The result keeps carrier discovery, cryptographic verification, and provider signals separate; it does not infer authorship from their presence or absence.
Examples
Inspect embedded provenance without invoking an external verifier.
$evidence = Get-OfficeProvenance -Path .\Published\cover.png
$evidence.Structural | Select-Object Format, HasC2paManifest
$evidence.TextIntegrityAsk an explicitly supplied c2patool installation to verify Content Credentials.
$evidence = Get-OfficeProvenance -Path .\Published\cover.png -C2paToolPath C:\Tools\c2patool.exe
$evidence.Verification | Select-Object Status, ProviderName, FindingsNetwork access remains disabled unless enabled in the supplied assessment options.
Parameters
- -C2paToolPath String
- Explicit c2patool executable path or controlled command name used for cryptographic verification.
- -Options OfficeProvenanceAssessmentOptions
- Structural, text-integrity, and provider verification limits and policy.
- -Path String
- Asset or document path to inspect.
- -SignalDetector IOfficeProvenanceSignalDetector[]
- Optional provider-specific watermark or disclosure detectors.
Common Parameters
This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.
For more information, see about_CommonParameters.