Practical exercises of data leakage channels detection using detection kit ST part 1

Practical exercises of detection of data leakage channels using detection kit ST part 1

Exercise 1
Turn on the ST-500”Piranha”, to do so, turn the tumbler on the upper side of the device clockwise.
On the screen, you will see the name of the manufacture and the version of the firmware. Please see Picture 1.

Afterwards press ENTER.
After pressing ENTER, the main screen of the device will appear.

To begin, press F1 or ENTER to enter the HF detector mode.

Upon the entry in to the HF mode, device scans all the diapason from 20 MHz to 6GHz and in panorama mode shows, all the signals present at the moment.

Please note that the device has an option of increasing or decreasing gain. It is recommended to begin searching with the 0 gain and increase it one step at a time.
If the time is limited, it is recommended to use SEARCH mode. In this mode, the operator chooses signals from the table. The table can sorted by pressing FUNC.
Before searching for the origin of the eavesdropping device using the differential mode of the device.
We must understand that by entering the differential mode device records all detected signals and their levels and set a 0 threshold.
Before we enter the search premise, we must go out of it, enter differential mode and then come in to the premise.
Please see picture below.

When entering the room all signals that were inside will begin appearing. Moreover, if the signal inside the room is strong it will immediately be shown on the screen. Please see picture below.

Afterwards the operator sets the marker on one of the signals and press enter to inspect. In case of the analog signal, the operator will hear the control sound of the acoustic emitter placed in the room.
Exercise 2

Turn on the ST-500”Piranha”, to do so, turn the tumbler on the upper side of the device clockwise.
On the screen, you will see the name of the manufacture and the version of the firmware. Please see Picture 1.

Afterwards press ENTER.
After pressing ENTER, the main screen of the device will appear.

To begin, press F1 or ENTER to enter the HF detector mode.

Upon the entry in to the HF mode, device scans all the diapason from 20 MHz to 6GHz and in panorama mode shows, all the signals present at the moment.

In this case, when searching in Panorama mode. The operator can select the signal that interests him by setting the marker on the signal that interests him.
In case of analog signal detection it is necessary to check all the available signals without amplification first. If none were found, start increasing the amplification step by step.
When a suspicious signal is detected the operator can put a marker on it and by pressing ENTER.
Afterwards device switches in to the selected frequency mode and audio can be heard in the earphones. Then the operator can detect the direction of the placement of the so called ”bug”.
Exercise 3
Turn on the ST-500”Piranha”, to do so, turn the tumbler on the upper side of the device clockwise.
On the screen, you will see the name of the manufacture and the version of the firmware. Please see Picture 1.

Afterwards press ENTER.
After pressing ENTER, the main screen of the device will appear.

To begin, press F1 or ENTER to enter the HF detector mode.

Upon the entry in to the HF mode, device scans all the diapason from 20 MHz to 6GHz and in panorama mode shows, all the signals present at the moment.
To turn on the device ST-402 or ST-403 “CAYMAN”. Turn the tumbler switch on the side of the device.


When detecting with the above mentioned device, if the operator detects a “dangerous” signal from within the premise using ST-500”Piranha”, he can also detect the location of the device using CAYMAN nonlinear junction detector. To do so, turn on the NLJD, but do not turn up the volume. Secondly, calibrate the device and afterwards point towards the direction of the supposed installation place of the eavesdropping device. If the device is analog then the operator of the ST-500 will hear the sound in his earphones.
For further detection of the placement of the eavesdropping device, it is necessary to use the SEARCH and AUDIO mode of the nonlinear junction detection.

When searching for the placement of the eavesdropping device the pattern of search is show in the following picture

Upon detection of an electret microphone, device may show RED response as well as BLUE response.

Upon detection of an electret microphone, device may show RED response as well as BLUE response.


Afterwards to distinguish whether it is a MOM structure or a Semiconductor it is necessary to switch AUDIO mode.
For a precise decision, whether it is a MOM structure or a semiconductor. It is recommended to tap on the surface and carefully listen to the response in AUDIO mode. If the taps in AUDIO mode return as a change of sound, then it surely is an MOM structure.
In case it is an actual semiconductor, when searching , in the earphones the operator hears white noise all the time, but when the actual semiconductor is detected the white noise disappears almost instantly.

CONTACTS

Address: Tilzes str. 38, Klaipeda 91112, Lithuania
Phone: +370 655 08288, +370 655 08286
Fax: +370 46 412231
E-mail: info@selcomsecurity.com

                   DEALERS

                   Latin America
Company name: Winsys Security C.A. 
Website: http://winsys-selcom.com/
E-mail:
winsys416@gmail.com 
Phone: +58 212 5763146; +58 412 3280884
       
                        Canada
Company name: NorthReliance Technologies
Address: 92 Caplan Ave. Suite 309
              Barrie, ON, L4N 9J2, Canada.
Tel.:+14169874168
Fax: +18668000565

zemelapis