Hidden Threat: Alternate Data Streams

Hidden Threat: Alternate Data Streams Hmm. This is quite interesting. Under any Windows machine with an NTFS disk, you can hide applications inside other files: C:> type nasty.exe > plain.txt:nasty.exe You can then run this command with: C:> start plain.txt:nasty.exe Now, this might not seem like much, but this is virtually undetectable. You can add any file to another file, and even exerienced sysadmins probably won’t find it!

blog comments powered by Disqus