Question: Purpose Purpose of this lab is to recognize Alternate Data Streams. In this lab, you will create a Default stream, then Alternate Data Stream (
Purpose Purpose of this lab is to recognize Alternate Data Streams. In this lab, you will create a Default stream, then Alternate Data Stream ADS view the ADS, using a Sysinternals tool available now from Microsofts website and finally delete the ADS. This assignment is aligned with the following module learning objective: MLO Locate forensic evidence in FAT and NTFS for Windows.
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
