Notifications
Clear all

Image Software

19 Posts
5 Users
0 Likes
1,063 Views
techmerlin
(@techmerlin)
Posts: 62
Trusted Member
Topic starter
 

Does anyone have a recommended piece of software used to dissect .jpg images or collect 'Metadata' from .jpg images? I am trying to get some info on a set of JGP images as to their origination

Thanks

 
Posted : 09/10/2005 1:31 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

I've written Perl scripts that retrieve EXIF data from jpgs, if it exists.

What other information, besides EXIF data, are you considering retrieving from the images?

H. Carvey
"Windows Forensics and Incident Recovery"
http//www.windows-ir.com
http//windowsir.blogspot.com

 
Posted : 09/10/2005 3:38 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

I've written Perl scripts that retrieve EXIF data from jpgs, if it exists.

What other information, besides EXIF data, are you considering retrieving from the images?

H. Carvey
"Windows Forensics and Incident Recovery"
http//www.windows-ir.com
http//windowsir.blogspot.com

 
Posted : 09/10/2005 3:39 am
techmerlin
(@techmerlin)
Posts: 62
Trusted Member
Topic starter
 

Harlan,

EXIF data should work here, I am trying to find a link with these images to link them to where they came from EXIF data should be sufficent. thus the reason for the question asking if anyone coudl recomend certain software.

Thanks

 
Posted : 09/10/2005 5:39 am
(@ashay)
Posts: 6
Active Member
 

I use many of Michal Mutl's products, and would suggest that you try his Exif Reader.

This is the direct link for the program

http//www.mitec.cz/Downloads/EXIF_Trial.zip

 
Posted : 09/10/2005 2:46 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

techmerlin,

If it's only EXIF data you're interested in, then a Google search for that will reveal commercial and freeware tools. Perhaps the most frequent recommendation you'll get is that you should confirm the information from the commercial tool with an open source tool, beginning with a hex editor. Perl (less than a dozen lines of code) will work fine.

H. Carvey
"Windows Forensics and Incident Recovery"
www.windows-ir.com
windowsir.blogspot.com

 
Posted : 09/10/2005 4:50 pm
techmerlin
(@techmerlin)
Posts: 62
Trusted Member
Topic starter
 

Harlan,

were any of these pearl scripts on the the CD in your book?

Thanks

 
Posted : 14/10/2005 11:42 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

No. Most folks tend to use commercial apps, even though Perl allows you to format the output. Most commercial GUI apps do the formating for you…

If you do need something in Perl, let me know. I don't do pearl, though. D

H. Carvey
"Windows Forensics and Incident Recovery"
www.windows-ir.com
windowsir.blogspot.com

 
Posted : 15/10/2005 12:20 am
techmerlin
(@techmerlin)
Posts: 62
Trusted Member
Topic starter
 

Thanks Haraln,

I have tried a few of the commercial items but really have not found one that works good AND gives you good reporting.

 
Posted : 15/10/2005 7:39 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

I have tried a few of the commercial items but really have not found one that works good AND gives you good reporting.

When one of these commercial items has not worked well for you, what happened? Was the information inaccurate? Did the commercial application not retrieve the information in question? And what kind of reporting were you looking for?

H. Carvey
"Windows Forensics and Incident Recovery"
www.windows-ir.com
windowsir.blogspot.com

 
Posted : 16/10/2005 1:50 am
Page 1 / 2
Share: