Forensic Analyzer troubleshooting

Common issues

• Zero findings on a suspicious file: the PDF may be encrypted (try unlocking first) or may have already been scrubbed by another tool.
• EXIF markers detected but not fully parsed: the image format may be JPEG2000 or a rare variant. The warning still flags the risk — use ExifTool for deep extraction if needed.
• Analysis slow on large files: byte-level EXIF scanning reads the entire file. For files over 50MB, expect 5-10 seconds.
• GPS finding shows 0,0 coordinates: this is a real finding (Null Island). Some cameras default to 0,0 when GPS signal is lost. The location is still metadata that reveals GPS was active.

Recovery steps

1. Retry with a smaller sample file.
2. Refresh and run the tool again.
3. Use an alternative workflow from /tools if needed.
4. Check /status for current incidents.

What this does not protect

• Troubleshooting guidance does not guarantee recovery for damaged files.
• It does not bypass document owner restrictions when cryptography is enforced.