Meta — Blue Team Labs Online

• This is a digital forensics lab.
• The mode is easy.

Scenario — The attached images were posted by a criminal on the run, with the caption “I’m roaming free. You will never catch me”. We believe you can assist us in proving him wrong.

Tools used;

• Exiftool
• Reverse Image Search

Download the file,use the password to access the file.

Q. What is the camera model?

• install exiftool, i used a kali vm to run this.These are the steps i followed to install exiftool;

1. Download the image-exiftool distribution.
2. unpack the distribution gzip -dc Image-ExifTool-12.72.tar.gz | tar -xf -
3. make it your current directory by running this command cd Image-ExifTool-12.72
4. Test exiftool by running these commands perl Makefile.PL , make test.
5. install the tool by running sudo make install
6. To see the image details use this command exiftool uploaded_1.JPG

A. Canon EOS 550D

Q. When was the picture taken?

A. 2021:11:02 13:20:23

Q. What does the comment on the first image says?

A. relying on altered metadata to catch me?

Q. Where could the criminal be?

• use a reverse image search to identify the image.I used https://tineye.com/

A. Kathamandu