StegoHunt is an industry-leading software tool, comprising the StegoAnalyst and StegoBreak tools, which can be used to discover the presence of hidden data activity in files and applications.

• Quickly identify data obfuscation activity in an investigation by scanning files, captured memory images, and, for active systems, active processes;

• Find evidence of steganography programs using YARA WetStone rules and hash sets provided in the monthly dataset releases;

• Identify suspicious carrier files by detecting program data, signatures, and structural and static anomalies;

• Use multiple operational discovery modes for transport file discovery, including directories, drives, files, and drive images;

• Relate and capture evidence for presentations to management or the court.