TUCOFS - The Ultimate Collection of Forensic Software

A Complete Resource for Cyber Law Enforcement Technologies



Windows NT

Steganography/Cryptography


Contraband Hell Edition
Submit Date: 10/26/2000 1:41:49 PM
License Info: see website
Price: see website
Short Description: BMP-based stego program with strong encryption
Web Link: http://www.biol.rug.nl/hens/j/che_xmas-beta.zip
Home Page: http://www.biol.rug.nl/hens/j/
Rating:
Submitted By: Investigator
Information: Contraband Hell Edition is a BMP-based stego program with strong encryption built in. It has a nice setup program and user interface and is FREE! It is still in beta, but only in so that it lacks helpfiles. Easy to use.

DataMark Techologies
Submit Date: 10/26/2000 1:44:55 PM
License Info: see website
Price: see website
Short Description: Products that hide information in bmp, jpg, gif, tga, tif, png, midi, wav, avi, and mpeg formats
Web Link: http://www.datamark-tech.com/products/products.htm
Home Page: http://www.datamark-tech.com/
Rating:
Submitted By: Investigator
Information: DataMark Techologies has four stego products that hide information in bmp, jpg, gif, tga, tif, png, midi, wav, avi, and mpeg formats. - StegComm for confidential multimedia communication, StegMark for digital watermarking of digital storage media, StegSafe for digital storage and linkage and StegSign for e-commerce transactions.

Digital Picture Envelop
Submit Date: 10/26/2000 1:32:34 PM
License Info: see website
Price: see website
Short Description: BMP-based stego program
Web Link: http://www.know.comp.kyutech.ac.jp/BPCSe/Dpenv-e/DPENVe-home.html
Home Page: http://www.know.comp.kyutech.ac.jp/BPCSe/Dpenv-e/DPENVe-home.html
Rating:
Submitted By: Investigator
Information: Digital Picture Envelope is a Windows 95/98/NT program based on the BPCS-Steganographic technique which was invented by Eiji Kawaguchi in 1997. It is a BMP-based stego program that can hide an incredible amount of data in a single file, often 50-100% of the originial image without changing the file size.

Gargoyle 2.1
Submit Date: 4/15/2005 12:02:13 PM
License Info:
Price:
Short Description: Super Charging Digital Investigations
Web Link: http://www.wetstonetech.com/catalog/item/1104418/620819.htm
Home Page: http://www.wetstonetech.com
Rating:
Submitted By: webmaster
Information: Uncover a Hidden Digital Arsenal. Maximize your time. Streamline your Investigation. Identify nefarious intent. Determine Modus Operandi. Identify Incriminating evidence. Audit User Bahavior. Enforce Corporate Policy.

JP Hide and Seek
Submit Date: 10/26/2000 1:30:22 PM
License Info: see website
Price: see website
Short Description: Hides data in JPG images
Web Link: http://linux01.gwdg.de/~alatham/stego.html
Home Page: http://linux01.gwdg.de/~alatham/stego.html
Rating:
Submitted By: Investigator
Information: JPHS is a Win95/98/NT stego program with a no-frills GUI that hides data in the ever popular JPG image format. Its small size is a major bonus as it easily fits on a disk. It uses encryption as well, but does not mention which type. DOS and Linux version also available.

Scramdisk
Submit Date: 10/26/2000 1:24:53 PM
License Info: see website
Price: see website
Short Description: Allows the creation and use of virtual encrypted drives
Web Link: http://www.scramdisk.clara.net/
Home Page: http://www.scramdisk.clara.net/
Rating:
Submitted By: Investigator
Information: Scramdisk is a Win 95/98 based disk encryption program that allows the creation and use of virtual encrypted drives. These can be created in a container file on a FAT formatted hard disk, on an empty partition, or stored in the low bits of a WAV audio file (which makes it steganography). It has a slick interface and comes with a number of 'industry standard' encryption algorithms, including Triple-DES, IDEA, MISTY1, Blowfish, TEA, and Square.

Stash
Submit Date: 10/26/2000 1:40:21 PM
License Info: see website
Price: see website
Short Description: Hide and extract, data in BMP, GIF, TIFF, PNG or PCX files
Web Link: http://www.smalleranimals.com/stash.htm
Home Page: http://www.smalleranimals.com/stash.htm
Rating:
Submitted By: Investigator
Information: Stash is a simple Win95/98/NT-based stego program that will allow you to hide (and extract, of course) any data file inside a perfectly normal BMP, GIF, TIFF, PNG or PCX file. It does not appear to have any additional encryption features.

StegAlyzerAS
Submit Date: 7/25/2005 11:26:45 AM
License Info: Single-user
Price:
Short Description: Steganography Analyzer Artifact Scanner
Web Link: http://www.sarc-wv.com/products.aspx
Home Page: http://www.backbonesecurity.com
Rating:
Submitted By: Webmaster
Information: Extend computer forensic examinations to include the search for artifacts and signatures of digital steganography applications. This product includes a license to SAFDB which can also be purchased separately.

StegAlyzerSS
Submit Date: 7/26/2005 3:24:36 PM
License Info: Single-user
Price:
Short Description: Steganography Analyzer Signature Scanner
Web Link: http://www.sarc-wv.com/products.aspx
Home Page: http://www.backbonesecurity.com
Rating:
Submitted By: Webmaster
Information: StegAlyzerSS detects 29 distinct signatures of steganography applications and also includes functions to identify file types that may be potential carrier files (i.e., may contain hidden information). Techniques and procedures available to extract information hidden with each of the 29 applications for which a signature exists. Contact the SARC for details and pricing.

Steganography Application Fingerprint Database (SAFDB)
Submit Date: 7/26/2005 3:20:58 PM
License Info: Single-user
Price:
Short Description: MS Access database that contains application profiles for 230 digital steganography applications and
Web Link: http://www.sarc-wv.com/products.aspx
Home Page: http://www.backbonesecurity.com
Rating:
Submitted By: Webmaster
Information: SAFDB can be use to help the examiner determine if a steganography application exists on seized or suspect storage media. If a steganography application is found, chances are it was used to hide something. The application profiles in SAFDB can be consulted to determine the technique used to hide the information which may facilitate attempts to extract any hidden information. Copies of the steganography applications are available from the SARC's archives for use by the examiner and/or SARC technical staff to attempt hidden information extraction.

Steganos II Security Suite
Submit Date: 10/26/2000 1:22:03 PM
License Info: see website
Price: see website
Short Description: Strong encyption and steganographic techniques to hide data
Web Link: http://www.steganography.com/english/steganos/index.html
Home Page: http://www.steganography.com/
Rating:
Submitted By: Investigator
Information: Steganos is now a suite of Win 95/98/NT applications designed to keep your data safe. Steganos II still uses strong encyption and steganographic techniques to hide data in graphic, sound, text, and HTML files, but now does so much more. New features include: 'InKA' (Invisible Key Agreement) an implementation of public key steganography, disk encryption, advanced password management tools, a "Zero-Emission-Pad" text editor to combat tempest attacks, a data shredder, and the "SysLock" function that effectively locks access to your PC when you are away. Available in English, German, and Italian versions. Definitely worth checking out!

Stego Suite 4.1
Submit Date: 4/15/2005 12:34:25 PM
License Info: See Website
Price: See Website
Short Description: Superb Accurate Detection of Steganography
Web Link: http://www.wetstonetech.com/catalog/item/1104418/619451.htm
Home Page: http://www.wetstonetech.com/f/Stego_Training_Syllabus.pdf
Rating:
Submitted By: Webmaster
Information: Steganography Investigator Training Course Fee: $1795 Includes copies of Stego Suite„· and Gargoyle Investigator„· Standard Edition) Please Call for Law Enforcement, Education and Bundled Training Discounts! Upon completion of this intense two-day course, Investigators will have a complete understanding of the threat posed by the use of steganographic technologies in the current digital environment. Threats posed by criminals exploiting children, terrorists and crime organizations creating covert communication channels, and disgruntled company insiders are some of the topics that will be covered. Students also learn how to conduct a complete steganography investigation from suspicion to detection, analysis, cracking, and finally to recovery of the hidden information. The course includes 6 hours of lecture, 6 hours of practical lab exercises and investigation, and a 2 hour written and practical exam. Students are provided their own laptop with all tools and laboratory exercises installed for the lecture and hands-on portions of the labs. In addition, all students receive complimentary fully licensed copies of WetStone¡¦s Stego Suite and Gargoyle Investigator Standard Edition software products, (including 1 year of software maintenance & updates), the steganography embedding tools used during the class, and a reference CD containing the training materials and lab exercises. All participants are eligible to receive 1.6 CEU credits and a course completion certificate. Those sitting for, and passing WetStone¡¦s written and practical exam, receive a ¡¥Certified Steganography Examiner¡¦ certificate. For WetStone¡¦s training schedule or to register for an upcoming training, please visit us at www.wetstonetech.com.

S-Tools
Submit Date: 10/26/2000 1:34:36 PM
License Info: see website
Price: see website
Short Description: Hides files in BMP, GIF, and WAV files
Web Link: http://www.webattack.com/download/dlstools.shtml
Home Page: http://www.webattack.com/freeware/security/fwencrypt.shtml
Rating:
Submitted By: Investigator
Information: S-Tools v4 is an excellent Win 95/NT based steganography tool that hides files in BMP, GIF, and WAV files.

WetStone Technologies, Inc
Submit Date: 7/15/2005 6:17:05 PM
License Info: See Website
Price: See Website for Pricing
Short Description: Intelligent Solutions for Digital Investigations
Web Link: http://www.wetstonetech.com/catalog/item/1104418/2347979.htm
Home Page: http://www.wetstonetech.com/f/LiveWire_Training_Syllabus.pdf
Rating:
Submitted By: Webmaster
Information: LiveWire Investigator Training Course Fee: $8995 (Includes copies of LiveWire Investigator™, LiveDiscover and Gargoyle Investigator Enterprise Edition) Please Call for Law Enforcement, Education and Bundled Training Discounts! Live digital investigation of a suspect system is the next generation technique for Forensic Examiners, Compliance Auditors, Private Investigators, federal, state and local Law Enforcement Investigators, prosecutors and corporate IT security personnel. LiveWire Investigator and it’s associated suite of products, a commercially available offering borne of DoD research and expert engineering and forensic techniques, provides extensive and comprehensive information regarding information contained on ‘live-running’ networks, computers, servers and network enabled devices. Throughout this intensive LiveWire Training Course, students learn the ‘do’s and don’t’s’ of live evidence collection and preservation, are taught to understand legal precautions and concerns, and also become skilled at the use of those tools necessary to conduct a digital investigation of this magnitude. Students are given simulated situations where they learn how to analyze and tailor the LiveWire Investigator information and reports to determine evidence, malicious software or cyber weapon use activity, or potential insider attack scenarios. The course includes 8 hours of lecture, 8 hours of practical lab exercises and investigation. Students are provided their own laptop with all tools and laboratory exercises installed for the lecture and hands-on portions of the labs. In addition, all students receive complimentary fully licensed copies of LiveWire Investigator, LiveDiscover, Gargoyle Investigator, and a certificate of attendance. Those sitting for, and passing WetStone’s written and practical exam, receive a ‘Certified Live Examiner certificate. For WetStone’s training schedule or to register for an upcoming training, please visit us at www.wetstonetech.com.


Note - The products referenced at this site are provided by parties other than TUCOFS (or its affiliates). TUCOFS makes no representations regarding either the products or any information about the products. Any questions, complaints, or claims regarding the products must be directed to the appropriate author, manufacturer or vendor. Click here to view the usage terms and conditions. By accessing and using this website, you are agreeing to be bound by these terms.


TUCOFS - The Ultimate Collection of Forensic Software. Copyright (c) 1999 - 2010. All rights reserved. Reproduction in whole  or in part in any form or medium without express written permission of  Cyber Enforcement Resources Incorporated is strictly prohibited.  Terms and conditions.