Does anyone have a recommended piece of software used to dissect .jpg images or collect 'Metadata' from .jpg images? I am trying to get some info on a set of JGP images as to their origination
Thanks
I've written Perl scripts that retrieve EXIF data from jpgs, if it exists.
What other information, besides EXIF data, are you considering retrieving from the images?
H. Carvey
"Windows Forensics and Incident Recovery"
http//
http//windowsir.blogspot.com
I've written Perl scripts that retrieve EXIF data from jpgs, if it exists.
What other information, besides EXIF data, are you considering retrieving from the images?
H. Carvey
"Windows Forensics and Incident Recovery"
http//
http//windowsir.blogspot.com
Harlan,
EXIF data should work here, I am trying to find a link with these images to link them to where they came from EXIF data should be sufficent. thus the reason for the question asking if anyone coudl recomend certain software.
Thanks
I use many of Michal Mutl's products, and would suggest that you try his Exif Reader.
This is the direct link for the program
http//
techmerlin,
If it's only EXIF data you're interested in, then a Google search for that will reveal commercial and freeware tools. Perhaps the most frequent recommendation you'll get is that you should confirm the information from the commercial tool with an open source tool, beginning with a hex editor. Perl (less than a dozen lines of code) will work fine.
H. Carvey
"Windows Forensics and Incident Recovery"
windowsir.blogspot.com
Harlan,
were any of these pearl scripts on the the CD in your book?
Thanks
No. Most folks tend to use commercial apps, even though Perl allows you to format the output. Most commercial GUI apps do the formating for you…
If you do need something in Perl, let me know. I don't do pearl, though. D
H. Carvey
"Windows Forensics and Incident Recovery"
windowsir.blogspot.com
Thanks Haraln,
I have tried a few of the commercial items but really have not found one that works good AND gives you good reporting.
I have tried a few of the commercial items but really have not found one that works good AND gives you good reporting.
When one of these commercial items has not worked well for you, what happened? Was the information inaccurate? Did the commercial application not retrieve the information in question? And what kind of reporting were you looking for?
H. Carvey
"Windows Forensics and Incident Recovery"
windowsir.blogspot.com