SANS Institute - FOCA

From GCA ACT
Jump to navigationJump to search

Description


FOCA is a tool that helps analysts and investigators to recover metadata and other hidden information from the files that organizations store on their networks. By analyzing these files, FOCA can help to uncover evidence of malicious or unauthorized activity. This tool can be used to analyze a variety of file types, including office documents, PDFs, and images.

More Information


https://www.sans.org/tools/?per-page=100