extract-metadata
Analyze evidence files by running file and ExifTool, computing SHA-256, and comparing extension with detected MIME type to confirm file-type discrepancies.
Instructions
Run real file and ExifTool analysis on an evidence file, calculate SHA-256, and compare its extension with the detected MIME type. An extension/MIME mismatch confirms a file-type discrepancy, not malware.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| filePath | Yes |