Investigator Use
ExifTool (exiftool.org) is the definitive command-line metadata extraction and editing tool capable of reading and writing metadata in hundreds of file formats including JPEG, TIFF, PNG, PDF, RAW camera formats, video files, audio files, and Microsoft Office documents. Developed by Phil Harvey, it is the reference standard for digital forensic metadata analysis.
For OSINT investigators and digital forensic analysts, ExifTool is essential for comprehensive metadata extraction from any file encountered during an investigation. Unlike web-based EXIF viewers that only process standard JPEG metadata, ExifTool handles the full diversity of metadata formats across all file types — making it the go-to tool for any investigation involving file metadata analysis.
Photograph metadata analysis with ExifTool extracts all standard and non-standard metadata fields including GPS coordinates, capture timestamps, camera make/model/serial number, lens information, exposure settings, and any proprietary manufacturer-specific fields. For investigative documentation, ExifTool's CSV export allows all metadata to be incorporated directly into case file spreadsheets.
Document metadata analysis is another critical capability. Microsoft Office documents embed author name, company name, last modified date, and creation date in their metadata. These fields frequently contain the author's real name and employer even when the document content is anonymous. PDF metadata similarly records author and creator information.
Video file metadata from ExifTool includes creation timestamps, GPS coordinates from geotagging-enabled devices, device model, encoding software, and duration. For video evidence authentication, the full metadata record provides context that complements visual analysis.
ExifTool's batch processing capability allows investigators to extract metadata from entire directories of files simultaneously, generating comprehensive metadata inventories from seized devices or document collections. The structured output formats (XML, JSON, CSV) integrate directly with analysis tools.
Install ExifTool locally rather than uploading sensitive investigation files to web-based services. Run against all files encountered in investigations where metadata may be present and relevant.
Document ExifTool version used, command flags applied, files processed, and all relevant output fields with extraction timestamps for forensic records.
Before You Pivot
Record Context
Capture the target, search terms, and why this source is relevant before you leave the page.
Preserve Evidence
Archive volatile pages, save screenshots, and keep timestamps for anything that may change.
Corroborate
Treat one tool as a lead source. Confirm important findings with independent sources.
Related Tools
AI or Not
Image & Video OSINT
AI or Not is the leading AI detector for all content types: text (ChatGPT, Claude), image (Midjourney, 4o), music (Suno, Udio) & video (Veo, Kling)
EXIF.tools
Image & Video OSINT
EXIF.tools is an online metadata viewer for EXIF, GPS, XMP, IPTC, and file hashes in images and documents, directly in the browser.
Face Recognition
Image & Video OSINT
PimEyes is a face recognition search engine and reverse image tool for finding where a person's photo appears across the web.
Face Search
Image & Video OSINT
Pictriev performs face similarity search from uploaded photos, supporting facial recognition research and identity verification workflows.
Facecheck
Image & Video OSINT
FaceCheck.ID is a face recognition search engine for finding people online by photo and verifying whether a claimed identity is real.
Foto Forensics
Image & Video OSINT
FotoForensics provides tools and training for digital picture analysis, including error level analysis, metadata, and tutorials.