Technical Bulletins



Visitors are welcome to download the current technical bulletin.  The remaining bulletins are available within the members only section.

NT Alternative Data Streams  ||  09TB014-001

An Alternate Data Stream is a file attribute that can point to more than one file. This article will explore their origins and explain how to use the items included with the Windows XP operating system to create one. Next it will focus how to use some tools from www.dmares.com to detect them and reveal their data. This is a foundational article, which provides the reader with critical information.

Download Here

 
 

The American Society of                                                                          
      Digital Forensics & eDiscovery, Inc |
2451 Cumberland Parkway, Suite 3382 |  Atlanta, GA 30339-6157  |  (866) 534-9734

      Contact US  |  Copyright 2013 |  All Rights Reserved  |  Legal  |  Privacy

Powered by Wild Apricot Membership Software