# Assemblyline PDFiD Service

Assemblyline PDFiD Service is a self-hosted tools & utilities app. Assemblyline service that extracts metadata and embedded objects from PDF files using Didier Stevens' PDFiD and PDFParser tools for security analysis. It is open source and self-hosted, installable on Docker Hub and Proxmox.

Canonical page: https://ourlocalhost.com/app/5459/assemblyline-pdfid-service

## Description

Assemblyline service that extracts metadata and embedded objects from PDF files using Didier Stevens' PDFiD and PDFParser tools for security analysis.

## Platform availability

Available on 1 of 9 platforms: Proxmox.

## Health score

35/100 (Low), based on 3 of 4 factors.
- Maintained: 58 (last commit 176 days ago)
- Popular: 17 (6 GitHub stars)
- Easy to install: 10 (0 install platforms, Docker image)

## Links

- GitHub: https://github.com/CybercentreCanada/assemblyline-service-pdfid
- Docker Hub: https://hub.docker.com/r/cccs/assemblyline-service-pdfid
- Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=assemblyline-service-pdfid
- Official website: https://cybercentrecanada.github.io/assemblyline4_docs/

## Common questions

### When does the PDFId service run PDFParser on a sample?

PDFParser runs only if the sample is in deep scan mode, or if selected PDFId plugins flag suspicious elements.

### Does MAX_PDF_SIZE still limit processing during a deep scan?

No, the maximum PDF size setting is ignored during deep scan.

### Can users add their own PDFId heuristics plugins?

Yes, PDFId plugins are Python scripts that can be added by users. A plugin class must define onlyValidPDF, name, and an __init__ method that receives the PDFId object.

### Does the service extract suspicious PDF objects as files?

PDFParser can extract entire objects as extracted files when PDFId plugins flag them. JBIG2Decode objects are only extracted in deep scan mode.

### Is the PDFId service available as a container image?

Yes, a container image is published for the PDFId service.

---
Source: Our Local Host (https://ourlocalhost.com/app/5459/assemblyline-pdfid-service), the self-hosted and open-source app directory.