# ADS(alternat data stream) ###### tags: `tryhackme` `meowhecker` `ADS` `hidden` [TOC] ![](https://i.imgur.com/aA72yTs.png) https://www.fineart-tech.com/index.php/ch/news/598-fineartsecurity-ads https://www.malwarebytes.com/blog/news/2015/07/introduction-to-alternate-data-streams Create ads ``` echo webshell > meowhecker.txt:malware ``` ![](https://i.imgur.com/dbj237D.png) Show ``` Get-Item -Path .\meowhecker.txt -Stream * ``` ![](https://i.imgur.com/eD2w6ct.png) Search for ADS ``` gci -recurse | % { gi $_.FullName -stream * } | where stream -ne ':$Data' ```