Our Members:

Technical Bulletins

Visitors are welcome to download the current technical bulletin.  The remaining bulletins are available within the members only section.

NT Alternative Data Streams  ||  09TB014-001

An Alternate Data Stream is a file attribute that can point to more than one file. This article will explore their origins and explain how to use the items included with the Windows XP operating system to create one. Next it will focus how to use some tools from www.dmares.com to detect them and reveal their data. This is a foundational article, which provides the reader with critical information.

Download Here


The American Society of

     Digital Forensics & eDiscovery, Inc

     For Digital Evidence Experts™

       2451 Cumberland Parkway, Suite 3382 

       Atlanta, GA 30339-6157

       (866) 534-9734

       Contact us online.



Copyright 2023

All Rights Reserved

Powered by Wild Apricot Membership Software