Skip to content

C++ framework module that wraps libexif to pull out EXIF data.

Notifications You must be signed in to change notification settings

alawrence/c_LibExifModule

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

c_LibExifModule
Sleuth Kit Framework C++ Module
August 2012
===============

C++ Sleuth Kit Framework module that wraps libexif to pull out EXIF data.

DESCRIPTION

This module is a file analysis module that will check all files for an exif
header, then parse any found headers for metadata of interest. Any metadata
of interest will be posted to the blackboad as TSK_METADATA_EXIF artifacts.

USAGE

Add this module to a file analysis pipeline. See the TSK
Framework documents for information on adding the module
to the pipeline:

    http://www.sleuthkit.org/sleuthkit/docs/framework-docs/


RESULTS

All results will be posted to the blackboard as TSK_METADATA_EXIF artifacts.


TODO
- Make metadata of interest configurable. Ie: allow the module to be configured
to pull out exif data other than the attributes we have hard coded.

About

C++ framework module that wraps libexif to pull out EXIF data.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published