ADSDump.exe is forensic tool that dumps all ADS stream for a file.
It identifies suspicious stream names and abnormally long streams for a file. It is used to check if you have possible malware stuffed into a stream. It dumps the stream in text (if it can), with option to force binary and hex format dumps.
1 comment
[ 2.8 ms ] story [ 7.0 ms ] threadIt identifies suspicious stream names and abnormally long streams for a file. It is used to check if you have possible malware stuffed into a stream. It dumps the stream in text (if it can), with option to force binary and hex format dumps.