Hidden Threat: Alternate Data Streams
-
Comments:
- here.
Hidden Threat: Alternate Data Streams Hmm. This is quite interesting. Under any Windows machine with an NTFS disk, you can hide applications inside other files: C:> type nasty.exe > plain.txt:nasty.exe
You can then run this command with: C:> start plain.txt:nasty.exe
Now, this might not seem like much, but this is virtually undetectable. You can add any file to another file, and even exerienced sysadmins probably won’t find it!