Much easier to hide in the registry (or even a LNK file) than an ADS. Too many forensic tools now key in on ADS.

May 25, 2022 · 10:46 PM UTC

1