The documentation for the NTFS file system states that NTFS supports multiple streams of data; however, the documentation does not address the syntax for the streams themselves. The Windows NT Resource Kit documents the stream syntax as fol...
Admins & users know very little about a feature of the NTFS file system called 'alternate data streams' (ADSs). This paper describes in detail how ADSs are created and manipulated, and how code hidden in ADSs can be executed. Specific diffe...
www.infosecwriters.com/texts.php?op=display&id=53
-
Get Site Info
A relatively unknown compatibility feature of NTFS, Alternate Data Streams (ADS) provides hackers with a method of hiding root kits or hacker tools on a breached system and allows them to be executed without being detected by the systems ad...
www.windowsecurity.com/articles/Alternate_Data_Streams.h<br/>tml
-
Get Site Info