Metadata Analysis
This course provides a practical introduction to the analysis and manipulation of digital metadata with real applications in computer forensics. Throughout the course, students will learn how to identify, interpret, and modify metadata in digital files using various tools, including hexadecimal editors, operating systems, and specialized utilities such as ExifToolGUI and FileDate. It also covers techniques for batch file analysis, device profiling, and forensic examination of timestamps. An essential resource for those seeking to deeply understand the role of metadata in the traceability, validation, and presentation of digital evidence.
The main objectives of this course include:
- Understand what metadata is and its relevance in digital forensics.
- Learn how to identify and modify metadata in different types of files.
- Use tools such as hexadecimal editors, ExifToolGUI, or FileDate to alter or verify metadata.
- Analyze key timestamps such as creation, modification, and last access in a forensic context.
- Interpret device-specific metadata for profiling and evidence attribution purposes.