Thursday, July 13, 2006 1:53 PM bart

Use Vista's DIR command to display alternate data streams

People who have been playing around with Alternate Data Streams (ADS) - otherwise known as a fork - in NTFS will be pleased with this little though useful addition to Vista's DIR command:

C:\Users\Bart\Documents\My Received Files>dir *.txt /R
 Volume in drive C has no label.
 Volume Serial Number is F046-2BE9

 Directory of C:\Users\Bart\Documents\My Received Files

06/29/2006  01:55 PM             3,944 out.txt
                                    26 out.txt:Zone.Identifier:$DATA
               1 File(s)          3,944 bytes
               0 Dir(s)   4,023,570,432 bytes free

In the listing above, you can clearly see the $DATA stream as well as the Zone.Identifier stream used by the Attachment Execution Service (introduced in XP SP2 and W2K3 SP1), which I've blogged about previously.

Del.icio.us | Digg It | Technorati | Blinklist | Furl | reddit | DotNetKicks

Filed under:

Comments

# Hide Information in Files

Monday, June 30, 2008 12:19 PM by Hide Information in Files

Pingback from  Hide Information in Files

# Hide Information in Files - Computer Forums

Monday, June 30, 2008 12:36 PM by Hide Information in Files - Computer Forums

Pingback from  Hide Information in Files - Computer Forums

# Hide Information in Files - Ken???sTechnology Blog

Wednesday, July 02, 2008 3:26 AM by Hide Information in Files - Ken???sTechnology Blog

Pingback from  Hide Information in Files   - Ken???sTechnology Blog