Questions tagged [alternate-data-stream]

Alternate Data Streams are features of Microsoft's NTFS filesystem. They allow single file to reference multiple independent 'streams' of data and are most commonly used to store file metadata.

On NTFS volumes, each file and directory must have at least one Data Stream. The main, unnamed, data stream refers to the actual data stored in the file. Additional (or Alternate) file streams can be attached to a file/folder by giving unique names to each alternate stream. These alternate streams may then be accessed by specifying the whole path to the file followed by a colon and the name of the stream. For example, this file path refers to the ADS named "MyStream" attached to a file named "MyFile.dat".

C:\Example\MyFile.dat:MyStream

Alternate streams may contain data a normal file can contain, and are not restricted in size, type, or number. Newer versions of Windows (Vista+) will refuse to execute programs stored as alternate streams (a security measure against running invisible EXE's)

50 questions
0
votes
1 answer

Samba(v 4.10.16) win10 can't open the files(like .xlsx .pptx) that has set extended attribute by setxattr() in centos7

Please forgive my broken English I try to use setxattr() to sets the value of the extended attribute for some file, the code is like that: int set_scl(string file_name, char scl) { char scl_data[16]; scl_data[0] = scl; ssize_t size = 1; …
0
votes
0 answers

Why is $DATA empty when downloading a file via UWP

I'm experiencing an issue while downloading an exe file from within an UWP App. The EXE cannot be run after downloading. When I download it via any browser, it works as expected. My research so far brought me to Alternate Data Streams. When I…
Mahobo
  • 105
  • 1
  • 16
0
votes
1 answer

How to use Trine Core io NTFS?

So I have tried using trinet core io ntfs dll to get to alternative data streams in C# (using VS 2015), but I have a problem: i couldn't find a way to write into a file. The code I tried: var fileinfo = new FileInfo(filename); var altstream =…
0
votes
2 answers

How to launch a .vbs or Window powershell every time my application like notepad, esclipe starts

how to launch a *.vbs every time my application like notepad, esclipe starts. so that i dont have to every time i start my esclipse , go and click on vbs manually Also i dont want to put them in start up , coz i have to run the script every time my…
-2
votes
0 answers

How to check for Alternate Data Streams in Java

I want to write a function in Java that checks if a file has and Alternate Data Stream in $DATA format and if it is larger than 0 kilobytes. If these two conditions are met, the function should return true. When I type the dir /R command from the…
bloodwork
  • 7
  • 2
1 2 3
4