The ICC Profile metadata block defines how to adjust the picture's coloring. And it concerns one specific type of metadata: the ICC Profile. Over the last month, there has been one big mistake that I've repeatedly seen. For example, what does a field named 'Date/Time' represent? Depending on the metadata block, it could be when the file was created, when it was last modified, when the metadata was added, or when the event depicted in the photo occurred. Often, the field has a well-defined name that is documented in a formal standard, but the field's name can still be confusing.

However, determining the purpose of a field may be non-intuitive. Within each type of metadata are sets of data fields, and each field has a name. The various fields within the metadata increase the complexity. Just identifying what created a particular metadata block may be difficult. Some of these metadata structures come from cameras, while others come from applications. A single picture may contain EXIF metadata, JFIF metadata, XMP, MPF, and other types of metadata. Problems occur when analysts don't take the time to identify what created the different pieces of metadata, what the metadata components describe, and what the programs that extract metadata are really showing.ĭifferent types of metadata come from different sources.

While there are lots of tools that display metadata, they do not all display the same things, and there are a few things that makes evaluating metadata complicated. Evaluating metadata requires more than just loading a picture and pushing a button.

Exiftool online tool