All right.
Let's talk about alternate data streams actually.
This is super important.
So what's an alternate data stream.
Well there's a great blog out there by Malware bytes that kind of helps explain it and I'll link it
in the course resources.
Basically you have two types of data streams you have a like a primary or a regular data stream and
then you also have a secondary or alternate data stream.
And this goes into a lot of detail on data streams how to retrieve them what you're looking for etc..
What we need to know is your regular data stream is like your primary text inside of a file that's considered
your primary data stream.
Your alternate is a way to hide information within a file so we can hide data.
OK.
So let's take a look at how data actually is hidden here.
So we did a dir and we see OK the HMO got Texas here but we could take a deeper look.
It says look deeper.
So let's do that we can do a dir slash are like this and now look we've got dot text root dot text and
then the dollar sign data.
So if we want to take a look at what's hiding in here we can do a lot of different things.
Anything in that malware bytes blog is perfect.
There's a tool from CIS internals called stream or streams that you can utilize.
There's power show that you can utilize.
You can also do is do something like this.
You could say more and then you could just paste this in here and you could see that.
Here is your route flag.
So always be cautious of an alternate data stream.
This is a way to hide information and something to know about.
So I thought this one was really cool.
Just want to throw it out there.
You might see this show up sometime on a capture the flag or some sort of hack the box or any sort of
machine like that.
Really neat trick.
So make sure you're aware of this and just keeping your notes.
So that's it.
In the next section we're gonna go ahead and talk about get system briefly and then we're going to move
on and start talking some even more privacy.
I'm really excited about it.
So get you over in the next section.