Forensicswiki.org has moved to this site, forensicswiki.xyz. For information, please join the Google Group forensicswiki-reborn

Exif

From Forensics Wiki
Jump to navigation Jump to search

The Exchangeable image file format (Exif) is an image file format which adds lots of metadata to existing image formats, mainly JPEG.

To read the Date/Time tag do:

 exif --tag=0x132 filename.jpg       (reveals Date & Tag) 
 exif --tag=0x9003 filename.jpg      (reveals Date and Time (original))
 exif --tag=0x9004 filename.jpg      (reveals Date and Time (digitized))

To set the Date/Time tag:

 exif  --tag=0x132 --set-value="1975:01:01 12:01:01" --ifd=0 filename.jpg

For tools that extract Exif meta data look here - Document_Metadata_Extraction#Images


External Links