The following are examples of metadata that can be found in the original digital images: Plenty of information gets embedded in the image whenever you take a photo with your smartphone or digital camera. Photo EXIF DataĮXIF stands for Exchangeable Image File Format, a standard for saving metadata to image files. The PDF metadata clearly shows that it was created using MS Word for Office 365 on October 10, 2018. Various PDF file-related metadata are displayed by Pdfinfo, including title, subject, author, creator, and creation date.ĬreationDate: Wed Oct 10 21:47:53 2018 EEST First, using the application pdfinfo, we may attempt to read the metadata. Let's see what we can get from the PDF document. It should be noted that depending on the PDF writer used, exporting the file to other formats, such as PDF, will keep the majority of the metadata of the original document. There are several ways to read the file information you may either open them in their native viewer or editor or utilize an appropriate forensic program.

However, much information is preserved within the file's metadata when you use a more sophisticated editor, like MS Word. The Operating System saves specific metadata, such as the file creation date and the last change date, when you create a text file with the extension TXT.

In that case, you need to install it manually. Typically local machines like ubuntu or Debian pdfinfo are by default installed but suppose you are using kali Linux and it's not installed. Letter-image.jpg ransom-letter.doc ransom-letter.pdf ransom-letter-2.zip So we saved the letter and zip file in our kali Linux system (local machine) and made the folder directory where we saved the file. For your convenience, we have converted the document to PDF format and extracted the image from the MS Word file. You received a document where the kidnapper requested some ransom, which is in MS Word format. Scenario 1: your loving cat 'Meow' has been kidnapped. Here I will show a practical example of how we will investigate a digital forensics investigation.

However, sometimes clearing all does not mean that you have cleared everything from your devices so that no one can trace you. Everything we do on our digital platforms, such as on laptops or mobile devices, we always leave traces.

Install exiftool kali linux