Forensicsexifforensicsmetadataimage-analysis

metacam

metacam extracts EXIF information from digital camera files, including JPEG images from cameras and mobile phones. It supports standard EXIF fields and vendor-specific extensions from Nikon, Olympus, Canon, and Casio.

Description

EXIF (Exchangeable Image File Format) is a standard for storing interchange information in image files, especially those using JPEG compression. Most digital cameras, including mobile phones, now use the EXIF format. The format is part of the DCF standard created by JEIDA to encourage interoperability between imaging devices.

In addition to the standard EXIF fields, MetaCam also supports vendor-specific extensions from Nikon, Olympus, Canon and Casio. This program is useful in forensics investigations, where extracting metadata from images can provide critical evidence such as timestamps, geolocation, camera details, and device-specific information.

MetaCam processes image files to parse and display this embedded metadata, aiding investigators in understanding the origin and context of digital images.

How It Works

metacam parses EXIF data embedded in JPEG image files, decoding both standard fields defined by the EXIF specification and proprietary vendor extensions from manufacturers like Nikon, Olympus, Canon, and Casio. It reads the interchange information stored in the file header, extracting tags related to camera settings, timestamps, and device specifics for output in human-readable or XML formats.

Installation

bash
sudo apt install metacam

Flags

-h,--helpDisplay this help
-v,--verboseDisplay unknown tags too
-a,--allDisplay ALL tags (implies -v)
-x,--xmlOutput as XML

Examples

Display the help message and usage information
metacam -h
Extract standard EXIF information from a single image file
metacam image.jpg
Extract EXIF information including unknown tags from an image file
metacam -v image.jpg
Extract all EXIF tags, including unknown ones (verbose mode implied), from an image file
metacam -a image.jpg
Output EXIF information from an image file in XML format
metacam -x image.jpg
Extract verbose EXIF information from multiple image files
metacam -v image1.jpg image2.jpg
Extract all tags from multiple JPEG files and output in XML format
metacam -a -x images/*.jpg
Updated 2026-04-16kali.org ↗