Question: Task 1: Hiding Files Using NTFS Streams 1. Start Windows 7 VM. 2. Create a folder called YourName on the c: drive 3. From the

Task 1: Hiding Files Using NTFS Streams

1. Start Windows 7 VM.

2. Create a folder called YourName on the c:\ drive

3. From the start menu, Open command prompt and navigate to c:\YourName by typing the following command in the command prompt:

cd c:\YourName

4. Type the below command in the command prompt and press enter

notepad readme.txt

5. readme.txt appears in Notepad (click the Yes button if prompted to create a new readme.txt file)

6. Type Hello World!

7. Save and close the file

8. Note down the file size of the readme.txt by typing dir in the command prompt.

- File size: _________

9. Now hide calc.exe inside the readme.txt by typing the following command in the command prompt:

type C:\Windows\System32\calc.exe>readme.txt:calc.exe

10. Type dir in command prompt and note down the file size of readme.txt.

- Did the size of readme.txt change?

11. Type dir /r in command prompt and note the file size of readme.txt again

- What are the results of this command?

- Provide a screenshot.

12. Download Stream Detector from https://www.novirusthanks.org/products/stream-detector/ and install it. Use it to extract the hidden file.

13. Start Stream Detector and click on Browse.

14. Select C:/YourName and click Ok then click on Scan button. Note the results under Stream Name, Content Type, and Size.

- Provide a screenshot of your results.

15. Right click on the Stream name then click on Extract Stream from the drop-down menu. This will save the stream onto Stream Detector\Extracts folder.

16. Close the Stream Detector.

- What is NTFS? Explain what does it stand for?

- What is ADS ? Explain what does it stand for?

- Discuss how ADS can be used maliciously?

- Discuss another alternative parameter/method for hiding files.

17. Now, hide a text file (secret.txt write inside it this is my first evil file) inside another text file (readme1.txt). Provide all steps in details then extract the hidden screen and provide a screenshot for the extracted hidden stream.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer

Step: 1 Unlock blur-text-image

Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock

Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!

Task 3: attack a victim using msfvenom Reverse (meterpreter) shell You will use two VMs for this task (Kali as the attacker and Win 7 as the victim) 1. Start windows 7 VM and create an administrator...

OBJECTIVES 1 . Create a new MySQL database. II . ASSUMPTIONS In this lab, you will perform some standard commands to find out about the server environment and then create a new database. III....

Please help me ASAP. I need the code from part 3 I. OBJECTIVES Take a look at the process of creating and managing database backups and how these backups are used in recovery of the database when it...

ICTN4310 LAB 03 - DATA ACQUISITION Background. Whether you are formatting an internal drive, external drive, USB flash drive, or SD card, Windows gives you the choice of using three different file...

Complete this in linux: PLEASE AND THANK YOU!!! INSTRUCTIONS: Demonstrate using regular expressions with the grep command to filter text by completing the tasks below. You will also be required to...

This is in linux: INSTRUCTIONS: Demonstrate using regular expressions with the grep command to filter text by completing the tasks below. You will also be required to complete tasks previous covered...

To learn how to ARCHIVE and RETRIEVE a project DP1310: Introduction to PLC LABORATORY #7 OBJECTIVES: To learn how to UPLOAD a configuration To configure CLOCK MEMORY BITS To write PLC LAD programs...

Unit 5 JavaScript - Dom Event and Dom Elements - Just Need JavaScript code - NEED HELP ON STEPS 1 THROUGH 16 PLEASE . (Note: I have added the handout below as a point of reference. ) CIS 198:...

Unit 5 JavaScript - Dom Event and Dom Elements - Just Need JavaScript code - Help Please. CIS 198: JavaScript Learning Unit 5: Activity Lab Activity 1. Create a folder called Quiz. 2. Within the...

Module 02 Lab 01 Lab Setup Start up your VM if it's not already running. Connect to your VM with the command vagrant ssh At the command line, update your software package database with the command...

Consider the following two mutually exclusive projects: Cash Flow (A) Cash Flow (B) -$358,806 -$15,652 Year 0 Q 1 2 3 4 28,600 57,000 54,000 428,000 Whichever project you choose, if any, you require...

Patty Schemelenberg, a 45-year-old woman, wishes to accumulate $300,000 over the next 15 years to supplement the retirement programs that are being funded by the federal government and her employer....

On January of the current year, Melissa ( 1 8 \ % ) , Devin ( 3 2 \ % ) , and Dianna ( 5 0 \ % ) are partners in the UPC Partnership. During the current year, UPC reports the following results. View...

Compared with half a century ago, adoption has become _ _ _ _ _ _ _ _ _ common, but it is more open and acceptabl e , so we probably discuss it _ _ _ _ _ _ _ . fill in the blanks more or much less or...

3. Messages of affect and value will decrease. Ambiguity in interpreting information will increase. Managers will have to seek new ways of communicating the affective component of messages.

6. Expectations of work performance may be machine driven. Employees in some organizations will perceive this as dehumanizing and coercive. (pp. 480481)

2. More informal messages and short-circuiting of the hierarchy will occur. Organization structure and formal information flow will be redefined.