# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Scribbles

# Scribbles v1.0 RC1 - User Guide

1 March, 2016

- 1
- 2
- 3
- 4
- 5
…
- 7
- 8

SECRET//ORCON/NOFORN
1. (U) Introduction
(S//OC/NF) Scribbles (SCRIB) is a document watermarking tool that can be used to batch process a
number of documents in a pre-seeded input directory. It generates a random watermark for each
document, inserts that watermark into the document, saves all such processed documents in an output
directory, and creates a log file which identifies the watermarks inserted into each document.
2. (S//OC/NF) Scribbles Requirements
(S//OC/NF) The Scribbles document watermarking tool has been successfully tested on the following:
A) Microsoft Office 2013 (on Windows 8.1 x64)
B) Documents from Office versions 97-2016 (Office 95 documents will not work!)
C) Documents that are not be locked forms, encrypted, or password-protected.
It may work on other, similar platforms without modification. If you have an operational need to run it
on a different platform, and are having trouble, please contact CCI/EDG/AED/OSB for assistance.
3. (S//OC/NF) Setting up the Scribbles tool
(S//OC/NF) Scribbles is intended for off-line preprocessing of Microsoft Office documents. The
Scribbles executable should be set up on a Windows system for batch preprocessing of documents that
will be watermarked before being returned to their desired location(s). The Scribbles executable,
parameter files, receipts and log files should not be installed on a target machine, nor left in a
location where it might be collected by an adversary.
(S//OC/NF) First, find the file server or media containing the Scribbles deliverables.
Then:
i) Find the Scribbles tools (“Scribbles.exe” and “ScribblesConfig_exampleParams.xml”), which
should be located in the deliverables folder at “BIN\SENSITIVE_but_UNCLASSIFIED”;
ii) Copy the entire folder onto an appropriate system with Microsoft Office installed; and
iii) Change into the directory you just copied over.
SECRET//ORCON/NOFORN

- 1
- 2
- 3
- 4
- 5
…
- 7
- 8