Extraction and Analyzing EXIF Data

What's EXIF? Let's understand it!!!!

Firstly download the ExifTool by Phil Harvey and also download the pyexiftoolGUI (No longer supported).

Now select the image and place it on the exiftool(-k).exe

image2

Now we will see the output of the image in cmd as:

image3

Within the image we can find several tags. To find the appropriate tag, we can view from the website: (https://exiv2.org/tags.html)

image4

Jeffrey’s Image Metadata Viewer → Not supporting right now

image5

We can explore the extensions supported by the Jeffrey’s Image Metadata viewer from above figure.

Due the unavailability I used the Metadata++ tool to view the exif data:

image6

Image Document Analysis Using Ghiro

From the official page of Ghiro we came to know that there are several ways to deploy this tool and evaluate the forensic image. I downloaded the OVA file and ran on the virtual machine.

image7

Now open up the web page using the same IP and now we can view the website as:

image8

Enter the default credentails:

ghiro:ghiromanager

The logged in homepage is:

image9

Now click on Cases and add a new case with all the description. Again, click at the left of the page to add images and click on Start Upload button. Our file uploaded as:

image10