What ImageMagick is

ImageMagick is published by ImageMagick Studio LLC under the ImageMagick License, which the project states is compatible with the GNU General Public License version 3. Version 7 is current, with 7.1.2 the stable series at the time of checking, and version 6 is listed as legacy with a porting guide. The magick command does the work that older installations spread across convert, identify, compare and other names. It reads and writes a very large number of formats, among them JPEG, PNG, GIF, TIFF, WebP, AVIF and Ultra HDR. Bindings exist for C, C++, Python, .NET and Node.js. The download page lists Windows installers for several architectures, a portable Linux AppImage and Homebrew on macOS.

Three jobs recur in forensic use. Identify in verbose mode lists an image's format, dimensions, colour space, bit depth and embedded properties, which goes into the notes beside the ExifTool output. Compare measures the difference between two images with a chosen metric and draws a difference image, which is how an examiner shows that a working copy is pixel-identical to the original or exactly where two versions differ. Convert to a lossless format such as PNG prepares an image for analysis without a second lossy save. Cropping, scaling and contact sheets serve presentation and are logged as commands. A difference map shows difference, not tampering: the interpretation of why two images differ, and whether that points to editing, belongs to an authentication tool and an expert. Lossy re-saving of evidence is avoided and the version used is recorded.

Primary applications

Where it is used

  • Listing the format, dimensions, colour space and properties of an image
  • Proving a working copy matches the original pixel for pixel
  • Showing exactly where two versions of an image differ
  • Converting images to a lossless format for analysis
  • Cropping and scaling for presentation with the commands logged
  • Batch processing of large image sets by script

Who uses it

  • Image forensic analysts
  • Laboratory staff automating image handling
  • Developers of forensic and research tools
  • Students of image processing

Capabilities and limits

Major capabilities

  • Reads and writes a very wide range of image formats, including JPEG, PNG, GIF, TIFF, WebP, AVIF and Ultra HDR
  • Verbose identification of format, geometry, colour space, depth and properties
  • Pixel comparison with several metrics and difference image output
  • Lossless conversion, cropping, scaling and compositing
  • Contact sheets and montages for review
  • Bindings for C, C++, Python, .NET and Node.js
  • Scriptable from any shell for repeatable processing
  • Installers for Windows, an AppImage for Linux and Homebrew on macOS

Technical limitations

  • A processing tool, not an authentication tool. Differences it shows still need interpretation
  • Every operation that re-saves a lossy format changes the pixels
  • Command line and code only. There is no case file or report
  • Behaviour differs between version 6 and version 7 commands, so scripts must state which they use
  • Large images and some operations need a lot of memory

Learning with DFRTI

Independent professional education covering the principles and workflows of ImageMagick. DFRTI is not a vendor training centre and its courses are not vendor certifications.

Before you learn it

  • Image formats, colour spaces and bit depth
  • Command line and basic scripting
  • The difference between lossless and lossy saving

Disciplines

Related tools

Courses that cover this tool

Product names and trademarks belong to their respective owners. DFRTI is an independent educational and research institute. Inclusion in this directory does not imply manufacturer endorsement, partnership or authorisation. Facts are checked against the manufacturer's public documentation on the date shown and may have changed since.

Go deeper with DFRTI

Free pages explain the ground. Structured courses, lab work and a mentor take you from knowing about it to doing it on a case.