Metadata is data about data, and in digital forensics, it often tells a story the original file does not. Understanding metadata analysis helps attorneys know what questions to ask their forensic examiner.
Document Metadata
Every Microsoft Word, PDF, and Excel file contains embedded metadata including author name, creation date, last modified date, and revision history. A contract claimed to have been signed years ago but showing a creation date of last month is powerful evidence of fraud.
Photo and Video Metadata
Images taken on smartphones contain EXIF data including GPS coordinates at the time of capture, device make and model, and precise timestamp. A photo claimed to be taken at one location but showing GPS coordinates 200 miles away can destroy an alibi or authenticate a scene.
Email Header Metadata
Email headers contain the originating IP address, sending server chain, and precise timestamps for each server hop. Forged or modified emails often reveal inconsistencies in the header chain that a qualified examiner can identify.
Octo Digital Forensics provides metadata analysis services for civil and criminal matters. Call 858-692-3306.
