Forensic Metadata Intelligence

Metadata Analyzer

Extract file metadata, verify integrity, and generate investigator-ready reports from images and documents with a single command.

Download ZIP View on GitHub

Designed for security analysts, incident responders, and digital forensics investigators who need trusted metadata, chain of custody hashes, and evidence-grade output.

MD5 + SHA256 verification for file integrity checks and forensic chain of custody.
MIME detection with libmagic to catch spoofed extensions.
HTML evidence reports with clickable GPS maps and clear status indicators.

Features

Powerful forensic extraction across images, PDFs, and DOCX files with modern reporting and deep artifact detection.

Hashing

Extract MD5 and SHA256 hashes for every analyzed file to prove evidence integrity and support chain of custody reporting.

Entropy Analysis

Calculate Shannon entropy for each file and flag high entropy as possible encryption or compression.

GPS Extraction

Read embedded geolocation metadata from images and surface coordinates in investigator-ready reports.

HTML Reports

Generate clean, self-contained HTML reports with styled tables, highlighted findings, and map links for GPS evidence.

MIME Detection

Detect real file types using libmagic instead of relying on extension names, so renamed or spoofed files are caught.

EXIF Stripping Detection

Flag JPEG and PNG images that have no EXIF metadata at all, highlighting possible evidence sanitization.

Installation

Install dependencies and run the tool in a secure Python environment.

python -m venv venv
venv\Scripts\activate
pip install -r requirements.txt

python analyzer.py sample_files\
  --json --csv --html

Sample Output

Inspect metadata findings directly in the terminal and export evidence reports for case files.

$python analyzer.py evidence\photo.jpg --json --html

✓Analyzing: photo.jpg

✓JSON report saved: reports/photo_20260617_143000.json

✓HTML report saved: reports/report_20260617_143000.html

✓Analysis complete. 1 file(s) processed.