Steganography detection and extraction playbook. Use when analyzing images (LSB, PNG chunks, JPEG DCT, EXIF), audio (spectrogram, DTMF), files (polyglots, appended data, ADS), and text (whitespace, zero-width, homoglyphs) for hidden data.

SKILL: Steganography Techniques — Expert Analysis Playbook AI LOAD INSTRUCTION : Expert steganography detection and extraction techniques. Covers image steganography (LSB, PNG chunk hiding, JPEG DCT, EXIF metadata, dimension tricks, palette manipulation), audio steganography (spectrogram, LSB, DTMF, morse), file steganography (polyglots, binwalk, NTFS ADS, steghide), and text steganography (whitespace, zero width Unicode, homoglyphs). Base models miss the systematic file type based analysis approach and tool specific extraction workflows. 0. RELATED ROUTING Before going deep, consider loading: [traffic analysis pcap](../traffic analysis pcap/SKILL.md) for extracting files from network captures before stego analysis [memory forensics volatility](../memory forensics volatility/SKILL.md) for extracting files from memory dumps [classical cipher analysis](../classical cipher analysis/SKILL.md) if extracted hidden data is further encrypted/encoded Tool Reference Also load [STEGO TOOLS GUIDE.md](./STEGO TOOLS GUIDE.md) when you need: Tool installation instructions and dependencies Detailed command reference for each stego tool Workflow patterns for specific file types 1. IMAGE STEGANOGRAPHY LSB (Least Significant Bit) LSB embeds data in the least significant bits of pixel color channels. PNG Specific JPEG Specific EXIF Metadata Palette Based (GIF) 2. AUDIO STEGANOGRAPHY Spectrogram Analysis Audio LSB DTMF / Morse Code WAV Header Manipulation 3. FILE STEGANOGRAPHY Polyglot Files A single file that is valid in two or more formats simultaneously. Appended / Embedded Data NTFS Alternate Data Streams (ADS) Steghide Brute Force 4. TEXT STEGANOGRAPHY Whitespace Encoding Zero Width Characters Homoglyph Substitution 5. DECISION TREE

steganography-techniques