Skip to content
attack.paths
Sign in
← LibraryTechnique entry
W-ADS-HIDEDefense Evasion

Alternate Data Stream Hiding

Stash a payload in an NTFS ADS (file:hidden) — invisible to most listings, executable via fully-qualified path.

§ Where this technique fits

W-ADS-HIDE is catalogued under the Defense Evasion tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.