Scary stuff.
http://en.wikipedia.org/wiki/Fork_%28filesystem%29
http://www.diamondcs.com.au/index.php?page=archive&id=ntfs-streams
http://www.heysoft.de/nt/ntfs-ads.htm
http://support.microsoft.com/kb/105763
http://www.infosecwriters.com/texts.php?op=display&id=53
http://aplawrence.com/Forum/Drag1.html
You are here
Alternate Data Streams...
June 19, 2007 - 1:18pm
#1
Alternate Data Streams...
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on Facebook
Follow us on LinkedIn
Follow us on Twitter
Follow us on Mastodon
Follow us on BlueSky
How come this issue hasn't been addressed yet? (the second link Bahamut posted was written back in 2001!)
By the way, can anyone verify whether this program mentioned in the second link, TDS-3 is either still available, or has it been replaced by something else?
Are there any other programs that we can use to scan inside these "Alternate Data Streams?" (preferably with a GUI, I hate using the CommandPrompt)
════════
PAM > U3
Please Make TiLP Portable
LADS. Sorry, but it's a command line utility. There's really no reason for a GUI anyway, and LADS is great (it even has simple switches that are easy to remember).
Vintage!
It's called ADS Spy. You can find it at:
http://www.spywareinfo.com/~merijn/programs.php#adsspy
Looks promising.
════════
PAM > U3
Please Make TiLP Portable