Скачать или смотреть Sneaky Tips and Tricks with Alternate Data Streams (ADS’s)

Alternate Data Streams are little known to most Windows (and Mac) power users and can easily be leveraged as sneaky places to hide executable code and scripts. Most administrators don’t know about them and most AV’s can’t scan them – especially when hidden in strange places like File System reserved directories!


Links:
  / secure_sean  
http://www.exploit-monday.com/2011/09...
https://redcanary.com/blog/using-alte...
https://www.wilderssecurity.com/threa...
https://www.sciencedirect.com/topics/...
http://tudr.thapar.edu:8080/jspui/bit...
https://www.google.com/search?q=alter...
https://www.researchgate.net/publicat...
https://cqureacademy.com/blog/alterna...
https://www.giac.org/paper/gcwn/230/a...
https://www.deepinstinct.com/2018/06/...
Mentioned Minner running net view https://nakedsecurity.sophos.com/2017...
https://textslashplain.com/2016/04/04...
https://textslashplain.com/2016/04/04...
https://cyberforensicator.com/2018/06...
https://superuser.com/questions/11994...
https://blogs.technet.microsoft.com/a...
https://hshrzd.wordpress.com/2016/03/...
https://cdn2.hubspot.net/hubfs/335490...
https://www.codeproject.com/Articles/...
https://github.com/reider-roque/pente...
https://www.welivesecurity.com/wp-con...
https://nakedsecurity.sophos.com/2017...
https://attack.mitre.org/techniques/T...
https://blog.talosintelligence.com/20...
https://www.symantec.com/security-cen...
https://www.symantec.com/security-cen...
https://github.com/k-vitali/Malware-M...
Empire: lib/modules/powershell/persistence/elevated/registry.py