Steganography Analysis and Research Center
Thoughtful . Insightful . Precise : The Global Leader in Steganalysis

Welcome to the Steganography Analysis and Research Center

A Backbone Security Center of Excellence

Home > Products > Steganography Analyzer Field Scanner (StegAlyzerFS) > Learn More

Steganography Analyzer Signature Scanner (StegAlyzerFS)

Steganography Analyzer Field Scanner

Perform rapid field triage for steganography artifacts and signatures!

Download Download a PDF version of the StegAlyzerFS datasheet


  • Perform rapid triage of suspect computer systems for the presence and use of steganography

  • Detect files associated with over 1,225 steganography applications

  • Detect signatures of over 55 steganography applications

  • Simple deployment on a USB device

  • Does not change target storage media, preserving its forensic integrity

  • Deploy at crime scenes where time-critical evidence may be present such as missing persons, child exploitation, and threats of imminent danger

  • Deploy at border checkpoints to prevent entry and exit of sensitive information such as terrorism, espionage, and trafficking


StegAlyzerFS is a steganalysis tool designed to perform rapid field triage on suspect media on computers to detect the use of steganography to conceal information. Often it is necessary to quickly identify potential evidence of concealed information while at the scene. If the information was hidden with a steganography application, currently deployed computer forensic triage tools will not detect it.

A suspect computer can be booted from the StegAlyzerFS device and results can be obtained in a matter of minutes. StegAlyzerFS detects any of the files associated with over 1,225 applications in the Steganography Application Fingerprint Database (SAFDB). SAFDB is the largest commercially available steganography hash set. In addition, StegAlyzerFS detects over 55 uniquely identifiable byte patterns, or known signatures, left inside files when particular steganography applications are used to embed hidden information within them.

Product highlights in StegAlyzerFS:

  • Software executes from single USB device

  • Requires no installation or configuration

  • Does not change target storage media, preserving its forensic integrity

  • Automated scanning of entire devices

  • Scan popular file systems such as ext2, ext3, ReiserFS, XFS, FAT, FAT32, NTFS, ISO and others supported by Linux kernel 2.6.32

  • Automated decompression/extraction of the following archive and compressed file types: zip, iso, tar, gz, gz2, bz, bz2, rar, cab, pax, cpio, xar, lha, ar, mtree

  • Extensive report generation in HTML format

  • Automated logging of key events and information of potential evidentiary value


StegAlyzerFS is available for a license fee of $395.00. The license includes technical support and all product updates for one year from date of purchase. License extension agreements available.