Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20107

General Discussion: Finding hidden encrypted files

$
0
0
armstrong wrote: Thanks! Also, talked to him a little today and apparently the only program he used to hide the file was command prompt. Not sure if that means anything and not really sure how to use command prompt to find files but any insight would be appreciated Maybe a DIR /x would help. "Malforming" a file or directory name is/was a common way to hide things (in the sense that they are not easily shown in Explorer and in a "normal" DIR). Using ALT+0255 or ALT+0160 is as old as DOS, if I recall correctly. But it's not really-really hidden, it depends on the view chosen in explorer and on how attentively you examine the DIR output. Example: http://www.msfn.org/board/topic/131103-win-ntbt-can-be-omitted/page__view__findpost__p__842843 But since you initially talked of "padding" it is also possible that he added the file at the end of another one. jaclaz

Viewing all articles
Browse latest Browse all 20107

Trending Articles