In 2008, I wrote a blog entry, Simple Techniques That Fool Forensic Tools, that included an introduction to Alternate Data Streams. Now, I’d like to go into more detail, so that you can better understand the use and danger of
Alternate Data Streams
Unstructured Data
Unstructured Data sounds like files that store disorganized data or simple text, but I see it as more of a classification term than the description of a file’s lack of internal data structures. Some examples, provided in an article by
What Is Dark Data?
What does Dark Data mean? We use this term on our website, as if it is obvious. In the most basic terms, Dark Data is information that is difficult to find. So, in effect it is sitting in the dark.
eDiscovery vs Computer Forensics
Aren’t Electronic Discovery and Computer Forensics the same thing? Some people would say that they are, but many practitioners strongly disagree. Here are some definitions that I found for Electronic Discovery: Gartner said that “E-discovery is the production and presentation of