In a previous lab, you learned how to use P2 Commanders Image Analyzer to automate image analysis to identify suspect files that may be useful in a forensic investigation.

In this lab, you will use S-Tools, one of many free tools available online, and the Windows Photo Viewer to discover possible steganographic activity in image files that are part of an evidence drive copy. Using S-Tools, you will properly identify and extract embedded data in carrier image and document your findings:

1. What is steganography?

2. Describe a legitimate business need to leverage steganography.

3. What is the difference between steganography and cryptography?

4. What were the names and sizes of the two hidden text files that you uncovered using S-Tools on the StegoMessage.bmp image file?

5. What is the hidden message embedded in the Cipherkey.txt file?