SBM Labs

Cyber Security Collaboration Project

Using NTFS Data Streams
04 Dec 2016

1. Create new file.
> echo "Hello, World" > info.txt

2. Write to alternative data stream of the file.
> echo "My Secret" > info.txt:secret

3. Test result.
> more info.txt
> more < info.txt:secret

How to create image of HDD for forensics and security?