Hiding in the ShaDOS

Alternate Data Streams (ADS) are a feature in NTFS which are often seen as a liability in InfoSec circles. They have been used to obscure malware and rootkits, making it difficult to detect their presence. However, these same qualities that make ADS attractive to malware developers also make ADS an interesting avenue for securing critical data.

Provided by: SecurityTube.net Topic: Security Date Added: Jul 2015 Format: Webcast

Find By Topic