-
-
Notifications
You must be signed in to change notification settings - Fork 311
EXIF Manager

The EXIF Manager is a privacy-focused feature integrated into the Harden System Security app under the Extras section. It allows you to deeply inspect, copy, and securely strip hidden metadata (EXIF, XMP, Comments, etc.) from your photos. It operates directly on the file's data chunks at the lowest level, strictly adhering to the official specs of each data model and photo format, ensuring that your privacy is protected without re-encoding the image or losing any visual quality.
Digital photos often contain hidden information, such as the camera model, software used to modify them, exact GPS location, and timestamps. The EXIF Manager parses the internal structure of the image file, categorizing every piece of metadata.
When you choose to remove metadata, the app safely strips out privacy-leaking and unnecessary data segments while carefully preserving chunks that are required for 100% visual integrity (such as ICC Color Profiles, physical dimensions, and minimal EXIF headers required to maintain the correct image Orientation).
Supported Image Formats: .jpg, .jpeg, .png.
More will be added in the future.
To analyze a photo, you need to load it into the EXIF Manager interface.
- Browse Button: Click the Browse button in the toolbar to open a file picker and select your image.
- Drag & Drop: You can easily drag and drop a JPG/JPEG or PNG file directly into the app's main window to instantly load it. (Note: Drag & Drop is natively disabled by Windows when the app is running as Administrator).
- View Selected File: Click the arrow next to the Browse button to view the exact path of the currently loaded image or to clear the selection.
Once an image is loaded, a preview thumbnail appears on the right, and the parsed metadata is displayed in a dynamic, categorized list on the left.
- Categorized View: Metadata is neatly organized into categories such as File Information, EXIF Metadata, XMP Metadata, Photoshop IRB, and more.
- Tag Counts: Each category header displays a badge indicating the exact number of metadata tags found within that specific section.
- Expand / Collapse: You can manually expand or collapse individual categories, or use the Expand All / Collapse All options located in the Actions drop-down menu to view everything at once.
If you need to save or share the metadata for analysis:
- Open the Actions drop-down menu and click Copy All, or simply press
Ctrl + Con your keyboard. - This will copy a beautifully formatted, plain-text summary of all parsed categories and their associated tags directly to your clipboard.
The EXIF Manager provides fine-grained control over what data gets removed. Note: Removing metadata will permanently overwrite the original file and cannot be undone.
If you only want to strip certain types of data (e.g., removing XMP Metadata but keeping EXIF Metadata), you can do so easily:
- Look for the Remove button (with a red trash icon) on the right side of a category's header.
- Clicking this button will instantly strip only that specific category of metadata from the file.
- Note: Categories crucial for visual fidelity (like File Information or Image Headers) will not have a Remove button, as they are not safe to remove.
To thoroughly sanitize the photo and remove all safe-to-remove metadata in one step:
- Open the Actions drop-down menu and select Remove All Metadata, or simply press the
Deletekey on your keyboard. - A confirmation dialog will appear. Once confirmed, the app will scrub the file, reconstruct the necessary visual headers, and reload the sanitized file to show you the remaining, safe baseline data.
- Create AppControl Policy
- Create Supplemental Policy
- System Information
- Configure Policy Rule Options
- Policy Editor
- Simulation
- Allow New Apps
- Build New Certificate
- Create Policy From Event Logs
- Create Policy From MDE Advanced Hunting
- Create Deny Policy
- Merge App Control Policies
- Deploy App Control Policy
- Get Code Integrity Hashes
- Get Secure Policy Settings
- Update
- Sidebar
- Validate Policies
- View File Certificates
- Microsoft Graph
- Firewall Sentinel
- Data Analysis in AppControl Manager
- Protect
- Microsoft Security Baselines
- Microsoft Security Baselines Overrides
- Microsoft 365 Apps Security Baseline
- Microsoft Defender
- Attack Surface Reduction
- Bitlocker
- Device Guard
- TLS Security
- Lock Screen
- User Account Control
- Windows Firewall
- Optional Windows Features
- Windows Networking
- Miscellaneous Configurations
- Windows Update
- Edge Browser
- Certificate Checking
- Country IP Blocking
- Non Admin Measures
- Group Policy Editor
- Manage Installed Apps
- File Reputation
- Audit Policies
- Cryptographic Bill of Materials
- Intune
- Configuration Service Provider (CSP)
- Service Manager
- Exploit Mitigations
- Sandbox Maker
- Duplicate Photos Finder
- EXIF Manager
- Download Manager
- Bootable Drive Maker
- Introduction
- How To Generate Audit Logs via App Control Policies
- How To Create an App Control Supplemental Policy
- The Strength of Signed App Control Policies
- How To Upload App Control Policies To Intune Using AppControl Manager
- How To Create and Maintain Strict Kernel‐Mode App Control Policy
- How to Create an App Control Deny Policy
- App Control Notes
- How to use Windows Server to Create App Control Code Signing Certificate
- Fast and Automatic Microsoft Recommended Driver Block Rules updates
- App Control policy for BYOVD Kernel mode only protection
- EKUs in App Control for Business Policies
- App Control Rule Levels Comparison and Guide
- Script Enforcement and PowerShell Constrained Language Mode in App Control Policies
- How to Use Microsoft Defender for Endpoint Advanced Hunting With App Control
- App Control Frequently Asked Questions (FAQs)
- System Integrity Policy Transformations | XML to CIP and Back
- About Code Integrity Policy Signing
- How To Install Microsoft Store Apps Completely Offline
- Create Bootable USB flash drive with no 3rd party tools
- Event Viewer
- Group Policy
- How to compact your OS and free up extra space
- Hyper V
- Git GitHub Desktop and Mandatory ASLR
- Signed and Verified commits with GitHub desktop
- About TLS, DNS, Encryption and OPSEC concepts
- Things to do when clean installing Windows
- Comparison of security benchmarks
- BitLocker, TPM and Pluton | What Are They and How Do They Work
- How to Detect Changes in User and Local Machine Certificate Stores in Real Time Using PowerShell
- Cloning Personal and Enterprise Repositories Using GitHub Desktop
- Only a Small Portion of The Windows OS Security Apparatus
- Rethinking Trust: Advanced Security Measures for High‐Stakes Systems
- Clean Source principle, Azure and Privileged Access Workstations
- How to Securely Connect to Azure VMs and Use RDP
- Basic PowerShell tricks and notes
- Basic PowerShell tricks and notes Part 2
- Basic PowerShell tricks and notes Part 3
- Basic PowerShell tricks and notes Part 4
- Basic PowerShell tricks and notes Part 5
- How To Access All Stream Outputs From Thread Jobs In PowerShell In Real Time
- PowerShell Best Practices To Follow When Coding
- How To Asynchronously Access All Stream Outputs From Background Jobs In PowerShell
- Powershell Dynamic Parameters and How to Add Them to the Get‐Help Syntax
- RunSpaces In PowerShell
- How To Use Reflection And Prevent Using Internal & Private C# Methods in PowerShell