research1 wrote:
How would one go about determining if an unusually large $badclus file was purposefully added too, as a method to hide data? Any common tools / techniques avail that can be searched for?
Look at it in hex view. If there's data in there, it will be obvious.
↧