Alternate Data Streams ? Adversary Defense Evasion and Detection [Guest Diary] - SANS Internet Storm Center

https://isc.sans.edu/diary/31990