Question: Purpose Purpose of this lab is to recognize Alternate Data Streams. In this lab, you will create a Default stream, then Alternate Data Stream (

Purpose Purpose of this lab is to recognize Alternate Data Streams. In this lab, you will create a Default stream, then Alternate Data Stream (ADS), view the ADS, (using a Sysinternals tool available now from Microsofts website) and finally delete the ADS. This assignment is aligned with the following module learning objective: MLO 1. Locate forensic evidence in FAT and NTFS for Windows.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!