Geolocation Image Mapping helps users to identify the location, where the image was taken. Generally while capturing an image, the device saves related information of the image like its “Name, Dimensions, Date taken, Item type, path, etc”. But, if GPS settings of the device are enabled, it also stores its location details along with the other Meta details as Geotag. It contains “Latitude, Longitude, and Altitude” value. During the Geolocation image search, this information helps to extract Geolocation from image.
Geolocation artifacts are the most prevalent form of digital forensic evidence. Effective searching and mapping of latitude and longitudinal data may often lead the investigators to hit at the most accurate spot. During the investigation of email repositories, a tremendous amount of image attachments are often obtained as the primary source of evidence.
In digital forensic investigation, an image plays a major role during the examination procedure. But if an image is obtained as evidence without any related information, it is being the most difficult situation for investigators. Then, the only solution is to perform the Geolocation image search and find the exact location from where it took.
Nowadays most of the images are captured using smart phones and digital cameras. Whenever the GPS setting is enabled within the system, it will automatically save its longitude, altitude and latitude values along with other Meta details of image. This information helpsinvestigators to search exact geological location of the image. MailXaminer is a beneficial Geotag photo locator loaded with highly sophisticated algorithms to provide most suitable approach of "Geolocation Image Mapping" of such images.
The Smartphone users are being provided with an option of turning their device Location on/off. If the Location privacy is ON and an image is clicked via the respective Smartphone, then it attaches an attribute of GPS. This attributes stores in the form of latitude, longitude and altitude within the image. MailXaminer is highly equipped Geotag location finder of such images with saved GPS attributes.
During anemail investigation, the Geolocation image search is the first task followed by the investigators if the evidence contains image attachment within it. But if the mailbox contains a tremendous amount of image data then it is a difficult task to extract the longitude, altitude, and latitude values from each image to find the location. In such situation, MailXaminer is reliable Geolocation forensics software that provides an automated solution to extract GPS location from a photo. Afterscanning and traversing the suspected mailbox using software, investigators are required to proceed with the following steps:
After adding evidence files into the software, go to the“Media” section that displays all the available media item attachments within the scanned mailbox repository.
In the “Loose Files” tab, tool displays a complete list all of media data stored in scanned file.Media section allows the categorization of information stored in files according to its file formats.
To view the GPS location of the image, users need to select the desired file. Then, click on "Option" button and select “Geo Location”.
Now,software will display the GPS location by mapping the location icon at the exact location on the map. A scale is also added at the screen that helps to view image details perfectly. Users can click on "+" to “Zoom In” and "-" sign to "Zoom Out".
If no Geotag information data is found in the image, then tool won't display GPS Location.
Users can also export the image file into KML format. It helps to extract GPS location from image and viewed on the other application (Google Earth).
For this, software will ask for the location in your system to save the exported data and evidence will get exported into KML format.
After the evidence gets exported, the software generates an Export Report that can be saved on the local machine. The path of the exported file is will be given in the report.
An exported report in KML format can also be used to extract GPS location from the image by using other applicationssuch as Google Earth.
Now for the Geolocation image mapping and manual analysis, the investigator is required to download Google Earth. Forensic examiners can download Google Earth by using the following resource: http://www.google.com/earth/download/ge/agree.html
After the downloading and installation of Google earth, launch Google Earth. Then, open the Google Earth user interface.
Now to extract and view the GPS location from photo, click on “File” option and select “Open”. Then, browse the respective KML file downloaded by MailXaminer. Google Earth immediately read the KML file, then search and maps the Geotag photo location that can be viewed in its window.
To extract Geolocation from image online, investigators can use this Geotag location finder. MailXaminer has been tested and verified by many law enforcement agencies and thus guarantees exact analysis of data without any sort of manipulation within the evidence. Being equipped with extensive features as forensic analysis of videos, pornographic image detection, and many more, the software stands as a complete forensics suite.