MOBILE FORENSICS

Mobile Artefacts – EXIF Metadata in IT Forensics

EXIF (Exchangeable Image File Format) refers to metadata that is stored by digital cameras and smartphones alongside photographs. This information can provide important insights into the origin, shooting conditions and technical characteristics of an image file. In IT forensics, however, EXIF data is always assessed in conjunction with other artefacts.

Forensic analysis
Documentation admissible in court
GDPR-compliant processing
Experienced experts

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
We analyse EXIF metadata alongside file system information, media databases, timestamps and other artefacts. This enables us to identify inconsistencies and document our findings in a transparent manner.

TYPICAL QUESTIONS

When is this analysis required?

  • ✔When was the photo taken?
  • ✔Where was the photograph taken?
  • ✔What device was it created on?
  • ✔Has any metadata been altered or removed?
  • ✔Do EXIF timestamps match up with other smartphone data?

LIMITATIONS & CONCLUSION

What you should know

EXIF data may be missing, altered or have been removed during export via messaging apps and social media. Image editing programmes can also alter metadata. For this reason, EXIF information alone is not conclusive evidence.

EXIF metadata is one of the most important sources of information when analysing digital images. It is most valuable as evidence when correlated with other technical and content-related artefacts.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Do you have any questions? Please contact us for a free initial consultation.

RELATED TOPICS

You might also be interested in

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

Is EXIF data always present?
No. Depending on the device, app or export method, metadata may be missing or removed.
Can EXIF data be manipulated?
Yes. That is why they are always cross-checked against other artefacts.
Do all the photos contain GPS coordinates?
No. Location data is only stored if the relevant function was enabled.
Is EXIF data admissible in court?
They can provide important clues, but should always be assessed within the overall context.
Why is EXIF data compared with other information?
Only by correlating this information with timestamps, file system data and other artefacts is it possible to draw reliable conclusions.