How FAT and NFTS differ
Learn how FAT and NFTS differ and uncover how these systems could have potential forensic implications on data recovery.
Another NTFS element that may have forensic implications is the presence of alternate data streams (ADS). ADS allows...
Continue Reading This Article
Enjoy this article as well as all of our content, including E-Guides, news, tips and more.
a file to be associated with more than one data batches on the disk (though the data in a file's ADS will be lost if it's moved to a non-NTFS volume). ADSes cannot be detected by a simple DIR command; they have to be revealed using specialized software.
To learn more about the potentially forensic implications, check out Microsoft's description of how NTFS works.
Dig Deeper on Windows Server and Network Security
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.
Meet all of our Windows Server experts
View all Windows Server questions and answers
Start the conversation
0 comments