Been sitting on these for a while (sigh).
- Metability Software is building a really cool and powerful tool to work with and explore EXIF data in images. FileMind Professional. It has a really nice tabbed main workspace and supports importing/exporting and reporting of EXIF data. I’m using the current (free) Beta Software version and it rocks.
- They also offer a cool little freeware app FileMind QuickFix which can strip out sensitive EXIF data before posting photo files to the web. Check it out.
- PhotoME - Exif, IPTC & ICC Metadata Editor is another free tool which can be used to show/display meta-data of image files. It is exceptionally well-rounded and has been around for a long time. Hat-tip to AddictiveTips for their post which led me to it: PhotoMe Lets You View, Analyze and Edit Image EXIF & IPTC Metadata
- BatchPurifier LITE - Free Metadata Removal Tool - Another free tool to remove meta-data from files in batch. See a review at AddictiveTips: Batch Remove Image/JPEG Metadata With BatchPurifier Lite
- AutoJpegTrunk (Google Translated) - very simple freeware tool/wrapper for ExifTool by Phil Harvey to clean meta-data. Again spotted at AddictiveTips: AutoJpegTrunk: ExifTool-Based Utility To Batch Remove Image Meta Data
- ExifTool by Phil Harvey - freeware awesomeness for the core tool of all things meta-data handling.
- Need more? see these Additional Resources on Phil Harvey’s page.
- Vinetto : a forensics tool to examine Thumbs.db files
- Vinetto - A Thumbs DB Parser/Viewer - Computer Forensics/E-Discovery Tips/Tricks and Information blog - includes info to get it running on Win32 as well as a built Win32 copy of Mark McKinnon’s work.
Why do we care about meta-data (examining and/or purging)?
Well for starters “dere’s gold in dem dere hills!”
- Stealing GPS Data from Images in Pentests - Security Aegis
- Strip your Images, not Yourself- Metability Software blog
- What the Situation Room REALLY Shows…- Metability Software blog
- Know Your Files - Metability Software blog
- Beyond Data about Data: The Litigator's Guide to Metadata [PDF] 2005 - found via e-evidence.info
- What's a Little Metadata Mining Between Colleagues [PDF] 2006 - Jessica M. Walker found via e-evidence.info
- Mobile Phones: Digital Photo Metadata [PDF Poster] 2007 - found via e-evidence.info. Note link to the “Carvey_gmu2005.zip” file is broken so either it got moved or dropped. Maybe Harlan can repost or share the updated link? I’d love to see it.
- GMU2005 presentations [Zipped PP Presentations] August 2005 -Harlan Carvey - Topics: The Windows Event Log file format; Tracking USB storage devices across Windows systems; File/document metadata.
- Windows Incident Response: Updates - Quoting Keydet89 from the linked post:
“Did you map all of the USB removable storage devices that had been connected to the system? You don't need to have the management software installed to copy images and videos (hint, hint) off of a phone...just connect it via a USB cable and copy the images (which will likely have some very useful EXIF data available).”
In addition, there are a number of freeware (and $-$$$$) image viewers/tools that also include meta-data handling embedded in them. This post is focused on meta-data specific tools. I’ll post linkage on some of the other applications that are more in this later class soon.
Cheers.
--Claus V.
No comments:
Post a Comment