This document discusses analyzing malicious PDF files. It provides an overview of PDF file structure and common strings found in PDFs. Tools are presented for parsing and scanning PDFs like pdf-parser.py, pdfid.py and Peepdf. A demo is shown using these tools to analyze a sample PDF. Limitations of only scanning for strings are noted, and it is recommended to also use antivirus and online scanning services to more thoroughly check for malware in PDFs.