# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Scribbles

# Scribbles v1.0 RC1 - User Guide

1 March, 2016

- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8

SECRET//ORCON/NOFORN
4. (S//OC/NF) Configuring the watermark parameters
(S//OC/NF) Before running the tool, it is a very good idea to configure the watermark parameters.
Scribbles ships with an example parameters file (“ScribblesConfig_exampleParams.xml”), which
you should have copied over to your system in step 3(A). If you open that XML file, you should
see something like the following (the XML formatting below was copied from Notepad++) :
<?xml version="1.0" encoding="UTF-8"?>
<Scribble_WatermarkParameters>
<URL_Scheme Value="http"/>
<HostServerNameList Value="watermarks.example.com"/>
<HostRootPathList Value="rootPath1,rootPath2"/>
<HostSubDirsList Value="subDir1,subDir2,subDir3"/>
<HostFileNameList Value="fakeFileName1,fakeFileName2,fakeFileName3"/>
<HostFileExtList Value=".jpg,.png,.gif"/>
<Input__Directory Value=".\InputDir"/>
<Output_Directory Value=".\OutputDir"/>
<Input__WatermarkLog Value="Z:\WORK\Scribbles\Scribbles\bin\Debug\WatermarkLog.tsv"/>
<Output_WatermarkLog Value="Z:\WORK\Scribbles\Scribbles\bin\Debug\WatermarkLog.tsv"/>
</Scribble_WatermarkParameters>
(S//OC/NF) You should replace the server name, root path, subdirectory paths, fake file names and
fake file extensions with whatever values are appropriate for the deployment.
(S//OC/NF) When generating a watermark, Scribbles will automatically select a value at random for a
parameter that has more than one value (such as "HostRootPathList", "HostSubDirsList",
"HostFileNameList", and "HostFileExtList" in the sample config. file above).
(S//OC/NF) For example, these are a few of the watermarks that would be generated using the
parameters in the example above:
http://watermarks.example.com/rootPath1/subDir3/5zfjgj16esmab3rgqz2piejtkiluaxi/fakeFileName3.gif
http://watermarks.example.com/rootPath2/subDir2/ofq44w41g04m1n_vuh6g056ai1a5ecm/fakeFileName1.png
http://watermarks.example.com/rootPath1/subDir2/1e1m6dq4qz7xh1cht5eq2ylqyzpx58pwy/fakeFileName2.jpg
http://watermarks.example.com/rootPath2/subDir3/rae0dbepwt8fygws1h3idt_1-0oq4gz/fakeFileName2.png
(S//OC/NF) So please make sure that the watermarks generated conform to the infrastructure that will
be used to monitor the incoming document watermark activity.
SECRET//ORCON/NOFORN

- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8