[HTML][HTML] Alternate data stream attack framework to perform stealth attacks on active directory hosts

A Bhardwaj, K Kaushik, MS Maashi, M Aljebreen… - Sustainability, 2022 - mdpi.com
Microsoft's file system, NTFS, is the most utilised file system by Windows OS versions XP,
Vista, 7, and 10. These systems have a little-known file attribute feature known as alternate …

Forensic techniques to detect hidden data in alternate data streams in NTFS

R Hermon, U Singh, B Singh - 2022 IEEE Bombay Section …, 2022 - ieeexplore.ieee.org
Alternate Data Streams (ADS) have been a feature of the New Technology File System
(NTFS) since its introduction in 1993. Alternate Data Streams (ADS) were introduced to …

Ntfs alternate data streams: focused hacking

M Broomfield - Network Security, 2006 - Elsevier
One of the most effective hiding places for a hacker to hide their malicious files in your
operating system, be it for Trojans or worms, is inside a hidden file which is linked to a …

[PDF][PDF] Alternate data streams: out of the shadows and into the light

RL Means - SANS Institute, 2003 - uqac.ca
Abstract Alternate Data Streams: Out of the Shadows and into the Light examines alternate
data streams in NTFS. It provides a thorough technical background in alternate streams …

ADS: Protecting NTFS from hacking

R Mahajan, M Singh, S Miglani - International Conference on …, 2014 - ieeexplore.ieee.org
Alternate Data Streams is one of the possible ways to hide data in NTFS file system in
Windows. It was introduced to make Windows NTFS compatible with HFS file system of …

[PDF][PDF] An adaptive SYN flooding attack mitigation in DDOS environment

K Hussain, SJ Hussain, V Dillshad… - … Journal of Computer …, 2016 - researchgate.net
A honeypot being an information security server attract the hackers towards it by showing
open ports and services and monitor network traffic closely by playing some key feature …

[PDF][PDF] A Win32-based technique for finding and hashing NTFS alternate data streams

A Dima - Proceeding of DoD CyberCrime 2007 Conference, 2007 - tsapps.nist.gov
As part of an effort to create new datasets for the computer forensic community, the National
Software Reference Library created a simple Windows specific tool for internal use similar to …

[PDF][PDF] Effective digital forensic analysis of the NTFS disk image

M Alazab, S Venkatraman… - Ubiquitous Computing and …, 2009 - researchgate.net
Forensic analysis of the Windows NT File System (NTFS) could provide useful information
leading towards malware detection and presentation of digital evidence for the court of law …

Forensics analysis of sandboxie artifacts

D Gupta, BM Mehte - … International Symposium, SSCC 2013, Mysore, India …, 2013 - Springer
SandBox is an isolated environment nowadays being used as an anti-forensics tool by many
(criminals) to perform malicious activity. The paper investigates the effectiveness of sandbox …

[引用][C] ADS Examiner: Tool for NTFS Alternate Data Streams Forensics Analysis

SH Mahant, BB Meshram - International Journal of Engineering Research & …, 2012