FAUST: Forensic artifacts of uninstalled steganography tools

Digital Investigation

Volumn 6, Issue 1-2, 2009, Pages 25-38

  Zax, Rachel ^a   Adelstein, Frank ^a  

^a ATC NY   (United States)

Author keywords

Artifacts; Directories; Evidence; Files; Registry keys; Steganography detection; Uninstalled programs

Indexed keywords

COMPUTER APPLICATIONS; DIGITAL COMPUTERS;

ARTIFACTS; DIRECTORIES; EVIDENCE; FILES; REGISTRY KEYS; STEGANOGRAPHY DETECTIONS;

STEGANOGRAPHY;

EID: 70149124307     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2009.02.002     Document Type: Article

References (23)

1. Adee Sally. Spy vs. Spy. IEEE Spectrum Online, August 2008, Retrieved 25 August 2008 from http://www.spectrum.ieee.org/aug08/6593.
2. Astrowsky B. Steganography: hidden images, a new challenge in the fight against child porn (2005). http://antichildporn.org/steganog.html
3. Cole E. Hiding in plain sight: steganography and the art of covert communication (2003), Wiley
4. Czeskis Alexei, St. Hilaire David J, Koscher Karl, Gribble Steven D, Kohno Tadayoshi, Schneier Bruce. Defeating encrypted and deniable file systems: TrueCrypt v5.1a and the case of the tattling OS and applications. 3rd USENIX workshop on hot topics in security (HOTSEC'08), San Jose, CA; July 29, 2008. Available at: http://www.usenix.org/event/hotsec08/tech/full_papers/czeskis/czeskis.pdf.
5. Dolan-Gavitt Brendan. Forensic analysis of the windows registry in memory. In: Proceedings of the 8th annual DFRWS conference. Baltimore, MD; August 2008. p. S26-32.
6. Johnson N. Steganography software (2008). http://www.jjtc.com/Steganography/tools.html
7. Kerbaj R., and Kennedy D. Link between child porn and Muslim terrorists discovered in police raids. The Times (October 17, 2008). http://www.timesonline.co.uk/tol/news/uk/crime/article4959002.ece retrieved January 11, 2009, http://www.timesonline.co.uk/tol/news/uk/crime/article4959002.ece
8. Kessler G. Steganography for the computer forensics examiner (2004). http://www.garykessler.net/library/fsc_stego.html
9. Latham A. Hide and seek for Linux (2006). http://nixbit.com/cat//security/jphs Retrieved 8 August 2008, from http://nixbit.com/cat//security/jphs/
10. Morgan Timothy. Recovering deleted data from the windows registry. In: Proceedings of the 8th annual DFRWS conference. Baltimore, MD; August 2008. p. S33-42.
11. Packetderm L.L.C. COTSE - steganography tools (2003). http://www.cotse.com/tools/stega.htm
12. Provos N. Outguess - steganography detection (2004). http://www.outguess.org/detection.php
13. Russinovich M., and Cogswell B. FileMon for windows (November 1, 2006). http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx
14. Russinovich M., and Cogswell B. RegMon for windows (November 1, 2006). http://technet.microsoft.com/en-us/sysinternals/bb896652.aspx
15. SARC - Steganography Analysis and Research Center. http://www.sarc-wv.com/news.aspx.
16. Spacegate. Privacy tools (2004). http://spacegate.xs4all.nl/
17. Steganography Analysis and Research Center. Steganography analyzer artifact scanner (2008). http://www.sarc-wv.com/stegalyzeras.aspx
18. Tistory.com. Steganography Tools, http://boanchanggo.tistory.com/219; 2008.
19. Virtual Box. Downloads. http://www.virtualbox.org/.
20. WinZip. The zip file utility for Windows. http://www.winzip.com/index.htm; 2008.
21. WetStone Technologies, Inc. Stego Suite. https://www.wetstonetech.com/cgi/shop.cgi?view, vol. 1; 2008a.
22. WetStone Technologies, Inc. Gargoyle Investigator. https://www.wetstonetech.com/cgi/shop.cgi?view, vol. 2; 2008b.
23. Wowarea. Steganography (2006). http://www.wowarea.com/english/help/stega.htm