Lab 7 ADS assignment Course Name and Number: ITN 276, Computer Forensics I, N280.E40M.FA18 Student Name: Daoud Abdelhamid Instructor Name: Santwana Das Lab Due Date: 10/07/2018
Lab reflection: Alternate data streams were added to the NTFS filesystem primarily for Macintosh compatibility. The Macintosh Hierarchical File System uses attached metadata (called the resource fork —
Microsoft doesn't have a monopoly on goofy feature names) to tell the system how to handle the data (called the data fork ). In effect, it's a more powerful, flexible version of the dot-3 extensions (.doc, .txt, .bmp, etc.) on Windows filenames. Having an equivalent to the resource fork in NTFS made it a lot easier to port software between the operating systems. Like the resource fork in the Mac, ADS can include a lot more information about a file than just the file type. Therefore, a number of Windows programs use alternate data streams. A good
You've reached the end of your free preview.
Want to read all 4 pages?
- Fall '15