Hiding Information in
Windows NT/2000
¨NTFS allows every file to have multiple streams of data associated with it
¨The normal contents of a file that can be seen and accessed by users is a stream itself
¨Other  data can be attached and hidden as separate stream using “cp” program in Windows NT Resource Kit 
–C:\>  cp stuff.txt notepad.exe:data
–C:\>  erase stuff.txt
–C:\>  notepad.exe
–C:\>  cp notepad.exe:data   stuff.txt
¨