¨NTFS allows every file to have
multiple streams of data associated with it
¨The normal contents of a file that
can be seen
and accessed by users is a stream itself
¨Other data can be attached and hidden as separate stream
using cp program in Windows NT Resource Kit
C:\> cp
stuff.txt notepad.exe:data
C:\> erase
stuff.txt
C:\>
notepad.exe
C:\> cp
notepad.exe:data stuff.txt
¨