FOCA is a tool used mainly to find metadata and hidden information in the documents it scans.

FOCA is a tool used mainly to find metadata and hidden information in the documents it scans.

• A. OSRFramework
• B. Recon-ng
• C. FOCA
• D. Path Analyzer Pro

Answer: (C)

FOCA is a tool designed to extract metadata from documents to reveal hidden information. When documents such as PDFs, Word, or other Office formats are created or edited, they carry metadata—things like the author, organization, software used, creation and modification dates, embedded paths, usernames, and sometimes even network information or software versions. FOCA specializes in scanning collections of documents, parsing this metadata, and presenting it in a way that helps an investigator or attacker understand the target’s environment and potential footholds. This makes FOCA particularly valuable for information gathering early in a security assessment because metadata often leaks more about the target than the documents themselves. The other tools listed serve different purposes. Recon-ng is a modular framework for performing web-based reconnaissance and gathering online intelligence. OSRFramework is a broader collection of OSINT tools and components for various data sources. Path Analyzer Pro focuses on analyzing paths or routes in other contexts, not on extracting embedded metadata from documents. Therefore, FOCA best fits the description of finding metadata and hidden information in scanned documents.

FOCA is a tool designed to extract metadata from documents to reveal hidden information. When documents such as PDFs, Word, or other Office formats are created or edited, they carry metadata—things like the author, organization, software used, creation and modification dates, embedded paths, usernames, and sometimes even network information or software versions. FOCA specializes in scanning collections of documents, parsing this metadata, and presenting it in a way that helps an investigator or attacker understand the target’s environment and potential footholds. This makes FOCA particularly valuable for information gathering early in a security assessment because metadata often leaks more about the target than the documents themselves.

The other tools listed serve different purposes. Recon-ng is a modular framework for performing web-based reconnaissance and gathering online intelligence. OSRFramework is a broader collection of OSINT tools and components for various data sources. Path Analyzer Pro focuses on analyzing paths or routes in other contexts, not on extracting embedded metadata from documents. Therefore, FOCA best fits the description of finding metadata and hidden information in scanned documents.