This script shows how to use PowerShell to display only files with Alternate Data Streams;
Output example;
Read more
Code:
get-ChildItem -recurse | % { get-item $_.FullName -stream * } | where stream -ne ':$Data' | select filename,stream,@{'name'='identifier';"e"={"$($_.filename):$($_.stream)"}}
Output example;
Code:
e:\utils>pshell adsdir.ps1
FileName Stream identifier
-------- ------ ----------
E:\Utils\ll.btm 123.txt E:\Utils\ll.btm:123.txt...
Read more