Steganography Analysis and Research Center
Thoughtful . Insightful . Precise : The Global Leader in Steganalysis

Welcome to the Steganography Analysis and Research Center

A Backbone Security Center of Excellence

Home > Products > Steganography Analyzer Artifact Scanner (StegAlyzerAS) > Learn More

Steganography Analyzer Artifact Scanner (StegAlyzerAS)

Steganography Analyzer Artifact Scanner

Detect files and registry entries associated with steganography applications!

Download Download a PDF version of the StegAlyzerAS datasheet


  • Search for artifacts associated with over 1,225 steganography applications

  • Detect insiders using digital steganography to steal sensitive or proprietary information

  • Enforce organizational policy prohibiting use of digital steganography or other data-hiding applications

  • Search for Microsoft Windows registry artifacts, a feature exclusive to StegAlyzerAS

  • Search for file artifacts using the largest steganography application hash set commercially available anywhere

  • Verify file artifacts with any of seven different hashing algorithms


StegAlyzerAS is a steganalysis tool designed to extend the scope of traditional computer forensic examinations by allowing the examiner to scan suspect media or forensic images of suspect media for known artifacts of over 1,225 steganography applications.

Artifacts may be identified by scanning the file system as well as the registry on a Microsoft Windows system. StegAlyzerAS allows for identification of files by using CRC-32, MD5, SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 hash values stored in the Steganography Application Fingerprint Database (SAFDB). SAFDB is the largest commercially available steganography hash set. Known registry keys are identified by using the Registry Artifact Key Database (RAKDB). RAKDB is the only commercially available steganography registry key database.

StegAlyzerAS was found to be effective for identifying file and registry artifacts by the Defense Cyber Crime Institute (DCCI) and the CyberScience Laboratory (CSL).

Product highlights in StegAlyzerAS:

  • Versions available for both 32-bit and 64-bit architectures

  • Case generation and management

  • Mount and scan forensic images of storage media in EnCase, ISO, RAW (dd), SMART, SafeBack, Paraben Forensic Replicator, and Paraben Forensic Storage formats

  • Automated scanning of an entire file system, individual directories, or individual files on suspect media for the presence of steganography application file artifacts

  • Automated scanning of the Microsoft Windows Registry for the presence of registry artifacts associated with particular steganography applications

  • File and registry artifact evidence viewers allow the examiner to view evidence according to the percentage of artifacts that were discovered for each steganography application detected

  • Scan summary viewer allows the examiner to quickly view a statistical summary of any previous scan performed during a particular examination

  • Extensive report generation in HTML format

  • Automated logging of key events and information of potential evidentiary value

  • Integrated help feature to explain specific features and functions


StegAlyzerAS is available for a license fee of $1,095.00. The license includes technical support and all product updates for one year from date of purchase. License extension agreements available.