Recognizing_the_Use_of_Steganography_in_Forensic_Evidence_4e_-_verity_Pobst

pdf

School

State College of Florida, Manatee-Sarasota *

*We aren’t endorsed by this school

Course

1600

Subject

Information Systems

Date

Oct 30, 2023

Type

pdf

Pages

Uploaded by MateDogMaster554

Recognizing the Use of Steganography in Forensic Evidence (4e) Digital Forensics, Investigation, and Response, Fourth Edition - Lab 02 Student: Email: verity Pobst veritypobst@usf.edu Time on Task: Progress: 14 hours, 50 minutes 100% Report Generated: Saturday, October 14, 2023 at 5:48 PM Section 1: Hands-On Demonstration Part 1: Detect Steganography Software on a Drive Image 14. Make a screen capture showing the search result and its description . Part 2: Detect Hidden Data in Image Files Page 1 of 9

Recognizing the Use of Steganography in Forensic Evidence (4e) Digital Forensics, Investigation, and Response, Fourth Edition - Lab 02 10. Make a screen capture showing the StegExpose results . 13. Make a screen capture showing the suspicious file in Microsoft Paint . Page 2 of 9

Recognizing the Use of Steganography in Forensic Evidence (4e) Digital Forensics, Investigation, and Response, Fourth Edition - Lab 02 Part 3: Extract Hidden Data from Image Files 2. Record the passphrase saved in the ReadMe file. landmarks 16. Make a screen capture showing the contents of the file extracted by OpenPuff . 17. Describe the contents of the hidden file. How might it be relevant to the current investigation? This is relevant to the current investigation because it was a hidden content that the creator thought would not be suspicious. They thought that it would not have been found. Page 3 of 9

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

Recognizing the Use of Steganography in Forensic Evidence (4e) Digital Forensics, Investigation, and Response, Fourth Edition - Lab 02 Section 2: Applied Learning Part 1: Detect Steganography Software on a Drive Image 5. Make a screen capture showing the search result and its description . Part 2: Detect Hidden Data in Image and Audio Files 4. Identify the image file with concealed data according to the StegExpose steganalysis tool. dB9olser.gif is suspicious according to the StegExpose steganalysis tool. Page 4 of 9

Recognizing the Use of Steganography in Forensic Evidence (4e) Digital Forensics, Investigation, and Response, Fourth Edition - Lab 02 7. Make a screen capture showing the WAV file sizes and hash values in E3 . Part 3: Extract Hidden Data from Image and Audio Files Page 5 of 9

Recognizing the Use of Steganography in Forensic Evidence (4e) Digital Forensics, Investigation, and Response, Fourth Edition - Lab 02 9. Make a screen capture showing the contents of the hidden file extracted by S-Tools . 15. Make a screen capture showing the contents of the hidden file extracted by Xiao . Page 6 of 9

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

Recognizing the Use of Steganography in Forensic Evidence (4e) Digital Forensics, Investigation, and Response, Fourth Edition - Lab 02 16. Describe the contents of the two hidden files. How might they be relevant to the current investigation? The 2 files are relevant because they show proof that the accused have contact numbers of their drug dealers. The other file shows what they are hiding which is the IP address using TOR. These 2 files are relevant because they show proof the accused company has hidden contact numbers for their drug dealers. The other file shows that they are actively trying to hide their IP address using TOR. Page 7 of 9

Recognizing the Use of Steganography in Forensic Evidence (4e) Digital Forensics, Investigation, and Response, Fourth Edition - Lab 02 Section 3: Challenge and Analysis Part 1: Detect More Hidden Data Record the names of the files that contain concealed data. The names of the files that contain the concealed data are chicago1.bpm and chicago.bpm Part 2: Extract More Hidden Data Make a screen capture showing the first file extracted by OpenStego . Page 8 of 9

Recognizing the Use of Steganography in Forensic Evidence (4e) Digital Forensics, Investigation, and Response, Fourth Edition - Lab 02 Make a screen capture showing the second file extracted by OpenStego . Powered by TCPDF (www.tcpdf.org) Page 9 of 9

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version