Metadata - Revision history

Hypertex at 17:33, 13 April 2010

2010-04-13T17:33:03Z

PashaPal: /* File types that support metadata and extraction tools */

2009-10-26T19:52:39Z

‎File types that support metadata and extraction tools

Joachim Metz at 11:51, 31 January 2009

2009-01-31T11:51:45Z

Joachim Metz at 11:51, 31 January 2009

2009-01-31T11:51:15Z

Simsong: /* External links */

2008-10-27T04:17:44Z

‎External links

Simsong: /* External links */

2008-10-27T04:17:28Z

‎External links

Simsong: /* Kinds of Metadata */

2008-10-27T04:10:52Z

‎Kinds of Metadata

Midnightcomm at 04:57, 23 April 2006

2006-04-23T04:57:00Z

Uwe Hermann: Reverted edit of Porker, changed back to last version by Joncare

2006-04-16T16:53:11Z

Reverted edit of Porker, changed back to last version by Joncare

Porker at 13:39, 16 April 2006

2006-04-16T13:39:08Z

@@ Line 40: / Line 40: @@
 :* [http://www.remotesensing.org/libtiff/ LibTIFF]
 :* [http://www.awaresystems.be/imaging/tiff/faq.html TIFF FAQ]
 =External links=
 * [http://en.wikipedia.org/wiki/Metadata Wikipedia: Metadata]
 * [http://theses.nps.navy.mil/08Jun_Migletz.pdf Automated Metadata Extraction],James Migletz, Master's Thesis, Naval Postgraduate School, June 2008

@@ Line 21: / Line 21: @@
 :* [http://libexif.sourceforge.net/ LibExif] (C)
 :* [http://www.drewnoakes.com/code/exif/ Metadata extraction in Java]
 ; [[ID3]] ([[MP3]] files)

@@ Line 30: / Line 30: @@
 ; [[Microsoft]] [[OLE Compound File]]
-: Microsoft Office document files contain a huge amount of metadata. They are created as OLE Compound Files and mainly stored in the so called property set streams.
+: Microsoft Office document files contain a huge amount of metadata. They are created as OLE Compound Files and mainly stored in the so called property set streams. Here are some tools for processing them:
 Here are some tools for processing them:
 :* [http://jakarta.apache.org/poi/index.html Jakarta POI] Open Source implementation in Java.
 :* [http://www.payneconsulting.com/ Payne Consulting] Metadata Analysis and cleanup.

@@ Line 29: / Line 29: @@
 :* [http://search.cpan.org/dist/MPEG-ID3v2Tag/ MPEG::ID3v2Tag] (Perl)
-; [[Microsoft]] [[OLE 2]]
+; [[Microsoft]] [[OLE Compound File]]
-: Microsoft Office document files contain a huge amount of metadata. They are created as OLE 2 files. Here are some tools for processing them:
+: Microsoft Office document files contain a huge amount of metadata. They are created as OLE Compound Files and mainly stored in the so called property set streams.
 :* [http://jakarta.apache.org/poi/index.html Jakarta POI] Open Source implementation in Java.
 :* [http://www.payneconsulting.com/ Payne Consulting] Metadata Analysis and cleanup.

@@ Line 42: / Line 42: @@
 =External links=
 * [http://en.wikipedia.org/wiki/Metadata Wikipedia: Metadata]
-* [http://theses.nps.navy.mil/08Jun_Migletz.pdf Automated Metadata Extraction], Maj. James Migletz, Master's Thesis, Naval Postgraduate School, June 2008
+* [http://theses.nps.navy.mil/08Jun_Migletz.pdf Automated Metadata Extraction],James Migletz, Master's Thesis, Naval Postgraduate School, June 2008

← Older revision		Revision as of 04:17, 27 October 2008
Line 42:		Line 42:
	=External links=		=External links=
	* [http://en.wikipedia.org/wiki/Metadata Wikipedia: Metadata]		* [http://en.wikipedia.org/wiki/Metadata Wikipedia: Metadata]
		+	* [http://theses.nps.navy.mil/08Jun_Migletz.pdf Automated Metadata Extraction], Maj. James Migletz, Master's Thesis, Naval Postgraduate School, June 2008

@@ Line 10: / Line 10: @@
 * [[File system]] metadata (e.g. [[MAC times]], [[access control lists]], etc.)
 * Digital image metadata. Although information such as the image size and number of colors are technically metadata, [[JPEG]] and other file formats store additional data about the photo or the device that acquired it.
 ==File types that support metadata and extraction tools==

@@ Line 6: / Line 6: @@
 Since metadata is fundamentally data, it suffers all of the data quality and pedigre issues as any other form of data. Nevertheless, because metadata isn't generally visible unless you use a special tool, more skill is required to alter or otherwise manipulate it.
-=Kinds of Metadata=
+==Kinds of Metadata==
+Some kinds of metadata that are interesting in computer forensics:
-Here are some kinds of metadata that are interesting in computer forensics:
 * [[File system]] metadata (e.g. [[MAC times]], [[access control lists]], etc.)
 * Digital image metadata. Although information such as the image size and number of colors are technically metadata, [[JPEG]] and other file formats store additional data about the photo or the device that acquired it.
-=File types that support metadata and extraction tools=
+==File types that support metadata and extraction tools==
 Below are some common data and metadata formats, the files in which they are found, and a collection of tools that can be used to extract information.
@@ Line 40: / Line 39: @@
 :* [http://www.awaresystems.be/imaging/tiff/faq.html TIFF FAQ]
-=External Links=
+=External links=
 * [http://en.wikipedia.org/wiki/Metadata Wikipedia: Metadata]
-* [http://en.wikipedia.org/wiki/Metadata Wikipedia: Metadata].

← Older revision		Revision as of 16:53, 16 April 2006
Line 6:		Line 6:
	Since metadata is fundamentally data, it suffers all of the data quality and pedigre issues as any other form of data. Nevertheless, because metadata isn't generally visible unless you use a special tool, more skill is required to alter or otherwise manipulate it.		Since metadata is fundamentally data, it suffers all of the data quality and pedigre issues as any other form of data. Nevertheless, because metadata isn't generally visible unless you use a special tool, more skill is required to alter or otherwise manipulate it.

−	=	+	=Kinds of Metadata=
		+
		+	Here are some kinds of metadata that are interesting in computer forensics:
		+	* [[File system]] metadata (e.g. [[MAC times]], [[access control lists]], etc.)
		+	* Digital image metadata. Although information such as the image size and number of colors are technically metadata, [[JPEG]] and other file formats store additional data about the photo or the device that acquired it.
		+
		+	=File types that support metadata and extraction tools=
		+
		+	Below are some common data and metadata formats, the files in which they are found, and a collection of tools that can be used to extract information.
		+
		+	; [[EXIF]] ([[JPEG]] and [[TIFF]] image files; Music Files)
		+	: The [[Exchangeable Image File]] format describes a format for a block of data that can be embedded into JPEG and TIFF image files, as well as [[RIFF WAVE]] audio files. Information includes date and time information, camera settings, location information, textual descriptions, and copyright information.
		+	:* [http://pel.sourceforge.net/ PEL: PHP Exif Library]
		+	:* [http://libexif.sourceforge.net/ LibExif] (C)
		+	:* [http://www.drewnoakes.com/code/exif/ Metadata extraction in Java]
		+
		+	; [[ID3]] ([[MP3]] files)
		+	: Implemented as a small block of data stored at the end of MP3 files. [[ID3v1]] is a 128-byte block in a specified format allowing 30 bytes for song, artist and album, 4 bytes for year, 30 bytes for comment, and 1 byte for genre. [[ID3v1.1]] adds a track number. [[ID3v2]] is a general container structure. For more information, see [http://www.id3.org/].
		+	:* [http://id3lib.sourceforge.net/ id3lib], a widely-used open source C/C++ ID3 implementation.
		+	:* [http://www.vdheide.de/projects.html Java library MP3]
		+	:* [http://search.cpan.org/dist/MP3-Info/ MP3::Info] (Perl)
		+	:* [http://search.cpan.org/dist/MPEG-ID3v2Tag/ MPEG::ID3v2Tag] (Perl)
		+
		+	; [[Microsoft]] [[OLE 2]]
		+	: Microsoft Office document files contain a huge amount of metadata. They are created as OLE 2 files. Here are some tools for processing them:
		+	:* [http://jakarta.apache.org/poi/index.html Jakarta POI] Open Source implementation in Java.
		+	:* [http://www.payneconsulting.com/ Payne Consulting] Metadata Analysis and cleanup.
		+	:* [http://www.inforenz.com/software/forager.html Inforenz Forager] Inforenz Forager
		+
		+	; [[TIFF]]
		+	: The [[Tagged Image File Format]] allows one or more images to be bundled in a single file. Multiple [[compression]] formats are supported. [[EXIF]] files can be stored inside TIFFs.
		+	:* [http://www.remotesensing.org/libtiff/ LibTIFF]
		+	:* [http://www.awaresystems.be/imaging/tiff/faq.html TIFF FAQ]
		+
		+	=External Links=
		+
		+	* [http://en.wikipedia.org/wiki/Metadata Wikipedia: Metadata].