Inspect File Metadata Without ExifTool's Command Line. Free.

An EXIF viewer surfaces the camera + capture metadata embedded in JPEG, TIFF and increasingly HEIF/RAW image files: camera make and model, exposure settings (ISO, aperture, shutter), lens identification, capture timestamp, GPS metadata coordinates and EXIF MakerNote fields with vendor-specific data. Sherlock Forensics Metadata Inspector is an EXIF viewer that goes beyond just reading EXIF: it also reads IPTC and XMP metadata layers (caption, copyright, keywords) used in stock photo and journalism workflows and Word document metadata, Excel metadata and PowerPoint metadata for the document side. As an EXIF viewer for forensic work the image metadata surface area matters because each layer can independently reveal authorship, capture time, geolocation and tampering signals.

GPS metadata extraction is the highest-value image metadata signal for photo forensics. EXIF GPS subgroups carry latitude, longitude, altitude, GPS timestamp and GPS direction. Geolocation forensics reads the GPS metadata directly and cross-references against the EXIF capture timestamp to establish where-and-when. Photo forensics workflows for civil litigation (custody disputes, employment investigations), criminal defense and corporate internal investigations all hinge on GPS metadata extraction from photo evidence. Sherlock's EXIF viewer surfaces GPS metadata with latitude and longitude in decimal-degrees and the source-EXIF representation, which downstream review tools and map-plotting workflows ingest directly.

Photo forensics for tampering detection uses EXIF inconsistencies as primary signals. A photo with a modification timestamp earlier than its capture timestamp is a strong tampering signal. A photo with no MakerNote where one is expected or with EXIF GPS metadata stripped but other EXIF fields intact, signals selective metadata removal. The EXIF viewer surface and the documented image metadata baseline lets a forensic examiner identify these patterns quickly. Sherlock's image metadata forensics output drops directly into evidence reports for photo forensics work, with the EXIF viewer findings preserved in the structured output.

ExifTool by Phil Harvey is the dominant open-source metadata extraction tool, a Perl-based command-line utility that reads and writes more metadata formats than any commercial competitor. ExifTool is excellent and free. For users who need a GUI metadata viewer on Windows without installing Perl, learning ExifTool's command-line flags or scripting around its output, an ExifTool alternative with native Windows GUI metadata viewer ergonomics is the practical fit. Sherlock Forensics Metadata Inspector is that ExifTool alternative: a single signed .exe, no install required, GUI metadata viewer for metadata extraction across EXIF, IPTC, XMP and document formats. The GUI metadata viewer workflow saves the buyer the time cost of CLI flag memorization and the setup cost of Perl installation, which is the practical core of why the ExifTool alternative argument lands for the Windows-buyer segment.

Honest scope on the ExifTool alternative argument: ExifTool reads more rare and obscure metadata formats than Sherlock does. For academic research, deep-format archaeology or formats outside the common 90% (Sherlock covers the EXIF + IPTC + XMP + Office mainline), ExifTool stays the right tool. For everyday metadata extraction work in IT-admin, privacy auditing, photo forensics and forensic-metadata workflows on Windows, the ExifTool alternative argument lands: Sherlock is the GUI metadata viewer the buyer needs, the metadata extraction is forensic-grade and the audit-trail output drops into evidence-grade reports. As an ExifTool alternative for the GUI-on-Windows buyer Sherlock wins on workflow fit, not on rare-format breadth.

Forensic metadata work splits into two high-leverage categories: evidence preservation (capture and protect the metadata baseline) and privacy auditing (find and remove metadata before publication). Sherlock Forensics Metadata Inspector covers both as the GUI metadata viewer for the Windows IT-admin and forensic-buyer market. The metadata viewer surface area in this category matters because evidence preservation depends on capturing every metadata layer the source file carries. Forensic metadata for evidence preservation captures the file's metadata state at first-contact with the evidence so any post-acquisition modifications are detectable. The metadata audit baseline is what defense experts use to challenge the integrity of digital evidence, so capturing it at acquisition time is the forensic metadata discipline that matters.

Privacy auditing uses the metadata viewer to identify what metadata is present, then the metadata stripper workflow to remove what would leak PII on publication. The two-step privacy workflow (metadata viewer pass then metadata stripper pass) is what compliance teams run against every document and image leaving the organization. The metadata stripper need is highest for organizations handling GDPR, HIPAA, FERPA and SOX-regulated content. Word document metadata is a particular GDPR risk: every Office document carries authorship, revision history, comment threads and frequently the original local-file path of the document. The metadata stripper workflow against Word document metadata, Excel metadata and PowerPoint metadata is what privacy officers run before a document leaves the organization. Sherlock's metadata viewer surfaces these document layers and the metadata stripper covers these document types and image EXIF stripping for photo publication workflows. The metadata viewer and metadata stripper combination is what makes the workflow practical: see what is present, remove what should not leak. Evidence preservation work pairs the metadata viewer baseline capture with downstream forensic chain of custody so the evidence preservation discipline survives a defense-expert challenge.

Other forensic metadata use cases: phishing investigation cross-references Word document metadata against suspected-malicious attachments (often the document metadata leaks attacker authorship details) which connects to Sherlock Forensics Email Analyzer for the broader email-attachment forensics. Photo evidence chain of custody requires capturing the EXIF baseline at acquisition; Sherlock's forensic metadata extraction surfaces every layer in one read. For the parallel forensic posture in adjacent categories see our PDF Editor for PDF metadata workflows, our OCR Reader for scanned-document metadata workflows and our Cellebrite vs Magnet AXIOM 2026 comparison for the broader mid-market mobile forensics tier positioning.

Every file you create or share carries invisible data that can expose sensitive information. Most users are unaware of what their files reveal to anyone who knows where to look.

EXIF GPS Data in Photos

Smartphone cameras embed GPS coordinates in every photo by default. A single image posted online can reveal your home address, your child's school location or the exact position of a secure facility. Stalkers, burglars and social engineers exploit this data routinely. The SANS Institute documents these risks in their digital forensics curriculum (sans.org).

Office Document Metadata

Legal documents frequently contain the author's full name, organization, computer username and complete revision history. Law firms have inadvertently disclosed privileged information through document metadata in court filings. The metadata may reveal who drafted a document, how many revisions occurred and what software was used.

Forensic Value of Metadata

In forensic investigations, metadata is evidence. EXIF timestamps establish when a photo was taken. GPS coordinates place a subject at a specific location. Document revision history reveals editing patterns. Camera serial numbers link photos across cases. Sherlock Forensics Metadata Inspector extracts all of this data for forensic analysis or removes it for privacy protection.

EXIF Data Extraction

Full EXIF data display for JPEG, PNG, TIFF and RAW images. GPS coordinates with map reference, camera make and model, lens data, exposure settings, timestamps and camera serial numbers.

PDF Metadata

PDF metadata extraction is handled by Sherlock Forensics PDF Editor. For PDF metadata workflows, see the PDF Editor.

Office Document Inspection

Read metadata from DOCX, XLSX and PPTX files including author, last modified by, revision count, total editing time, company name and template information.

Metadata Stripping

Remove all metadata from supported file types. Creates a clean copy with the original file preserved. Verify stripping by re-inspecting the output file.

Batch Processing

Process entire directories of files. View metadata summaries across hundreds of files. Export findings to CSV for forensic documentation.

GPS Coordinate Display

Display GPS coordinates in decimal degrees and degrees-minutes-seconds formats. Copy coordinates for direct use in mapping applications.