Vulnerability Development mailing list archives

RE: How to hide a file ?


From: H C <keydet89 () yahoo com>
Date: Tue, 8 Jan 2002 10:21:39 -0800 (PST)

Cory,

Just a quick note on hiding using data streams...

While the streams themselves are transparent,
creating an alternate data
stream does alter the modified date of the "parent"
file.

You're correct, but I'm not sure where thats really
even an issue.  

'touch' utilities are trivial.  In fact, I recently
put a Perl script up on my site that shows
programmatically how to do this via the Win32 API. 
Nothing new, of course, other than the fact that the
script allows the user to change the creation date, as
well as the last access and write times.

However, I started a separate thread on this issue on
the Forensics list, so I won't belabour it here...


__________________________________________________
Do You Yahoo!?
Send FREE video emails in Yahoo! Mail!
http://promo.yahoo.com/videomail/


Current thread: