SANS Workshop – Metadata Madness

Metadata is a vital part of digital forensics work but is often glanced over for OSINT. In this workshop, we'll discuss why metadata is far more useful than most analysts give it credit for. We'll cover why many people miss metadata and how it could potentially reveal hidden information. We'll even set up some hands-on exercises so you can practice your skills.

Prerequisites: None

Prior to the workshop:

• Please install ExifTool before the workshop. Available for MacOS, Windows, and Linux here: https://exiftool.org/
• Download the lab files here: https://sansurl.com/metadata-madness-files

*Please note, we will not be able to troubleshoot or support local issues. It is highly encouraged that you download and verify your software is working before the workshop.

System Requirements: ExifTool must be installed on your machine.