imago forensics

No description is available yet
imago forensics logo

Here is the markdown description:

Imago-forensics 🕵️

Extract digital evidences from images recursively. A Python tool that compares images easily by extracting metadata into a CSV file or SQLite database. Supports JPEG and TIFF image types.


Setup


Via pip

  1. Install imago:
$ pip install imago
  1. Once installed, one new binary should be available: imgo

Requirements:

  • Python 2.7
  • exifread >= 2.1.2
  • python-magic >= 0.4.15
  • argparse >= 1.4.0
  • pillow >= 5.2.0
  • nudepy >= 0.4
  • imagehash >= 4.0
  • geopy >= 1.16.0

Usage

usage: imago.py [-h] -i INPUT [-x] [-g] [-e] [-n] [-d {md5,sha256,sha512,all}]
                 [-p {ahash,phash,dhash,whash,all}] [-o OUTPUT] [-s]
                 [-t {jpeg,tiff}]
optional arguments:
   -h, --help            show this help message and exit
   -i INPUT, --input INPUT
                         Input directory path
   -x, --exif            Extract exif metadata
   -g, --gps             Extract, parse and convert to coordinates, GPS exif metadata from images (if any)
   -e, --error-level    Calculate Error Level for each image
   -n, --nudity         Detect Nudity in each image
   -d {md5,sha256,sha512,all}, --digest-type {md5,sha256,sha512,all}
                         Calculate MD5, SHA256, or SHA512 hash for each image (default: all)
   -p {ahash,phash,dhash,whash,all}, --perceptual-image-hash {ahash,phash,dhash,whash,all}
                         Calculate perceptual image hash using aHash, pHash, dHash, or wHash
   -o OUTPUT, --output OUTPUT
                         Output directory path for CSV file and SQLite database
   -s, --sqlite        Keep the temporary SQLite database after processing
   -t {jpeg,tiff}, --image-type {jpeg,tiff}
                         Specify image type to process (default: all)

Features:

Functionality Status
Recursive directory navigation ✔️
file mtime (UTC) ✔️
file ctime (UTC) ✔️
file atime (UTC) ✔️
file size (bytes) ✔️
MIME type ✔️
Exif support ✔️
CSV export ✔️
Sqlite export ✔️
MD5, SHA256, SHA512 ✔️
Error Level Analysis ✔️ BETA
Full GPS support ✔️
Nudity detection ✔️ BETA
Perceptual Image Hashing ✔️

ToDo:

Task Status
Test code
Comments and Suggestions are welcome 👍




> Visit imago forensics Website <