logoalt Hacker News

ahokatoday at 5:09 PM2 repliesview on HN

Wait until your learn about Alternate Data Streams…


Replies

p_ingtoday at 6:42 PM

They had their use when running Services for Macintosh.

show 1 reply
boston_clonetoday at 6:29 PM

Decent writeup from CS with that evasion method described -

https://www.crowdstrike.com/en-us/blog/anatomy-of-alpha-spid...