Undo evidence in various file formats