nerdexam
GIAC

GCIH · Question #49

Which of the following tools can be used to detect the steganography?

The correct answer is A. Dskprobe. Steganography tools are used to hide data, while Dskprobe can examine raw disk data to detect hidden content.

Malware Analysis & Advanced Persistent Threats

Question

Which of the following tools can be used to detect the steganography?

Options

  • ADskprobe
  • BBlindside
  • CImageHide
  • DSnow

How the community answered

(37 responses)
  • A
    86% (32)
  • B
    3% (1)
  • C
    8% (3)
  • D
    3% (1)

Why each option

Steganography tools are used to hide data, while Dskprobe can examine raw disk data to detect hidden content.

ADskprobeCorrect

Dskprobe is a low-level Windows disk sector editor that allows inspection of raw disk data, enabling analysts to detect anomalies or embedded hidden content characteristic of steganography. Unlike the other options, which are designed to conceal data, Dskprobe provides a detection-oriented view of underlying disk structures.

BBlindside

Blindside is a steganography embedding tool used to hide data inside image files, not a detection utility.

CImageHide

ImageHide is used to conceal data within image files by manipulating pixel values, making it a hiding tool rather than a detector.

DSnow

Snow is a steganography tool that hides data in the whitespace of text files using tabs and spaces, not a detection tool.

Concept tested: Steganography detection vs. embedding tools

Topics

#steganography detection#digital forensics#covert channels#Dskprobe

Community Discussion

No community discussion yet for this question.

Full GCIH Practice