Skip to main content

Stream Detector reveals Alternate Data Streams on NTFS drives

NoVirusThanks Stream Detector is a free program for the Windows operating system that allows you to scan entire NTFS hard drives or folders on them for alternate data streams.

Every file on a storage device formatted with the NTFS file system has at least one data stream assigned to it. It is called the unnamed data stream and executed when you double-click on files or when you run files from the command prompt.

One special feature of NTFS is that files can contain multiple data streams. Unlike the default unnamed data stream, these data streams are all named making the distinction easy; Every alternate data stream is named.

If you want, think of files with Alternative Data Streams as multiple files packed into a single file. Applications include hiding content in files as Windows does not reveal information about alternate data streams to the user by default.

Stream Detector

Stream Detector is a third-party program that you can use to display alternate data streams of files residing on NTFS storage devices.

stream detector

The program needs to be installed before it can be run on the system. The interface is basic but sufficient for what it offers.

Select a folder that you want to scan, and decide whether you want sub directories scanned and zone.identifier streams ignored (both selected by default).

You may also scan specific file types or names only by using the file mask filter (set to scan all files by default).

A click on the scan button starts the process. The time it takes to scan the selected folder structure depends on the selected preferences, the number of files found in the folder, and the speed of the hard drive or storage medium.

Stream Detector displays its findings immediately while it scans in its interface. Each file is displayed with its name, the stream name and type, content type and other information if available.

A right-click on a file displays a set of operations that include opening the folder, and extracting or deleting alternate data streams.

Extraction of alternate data streams is the only option to access these data streams using the application. Stream Detector places them in the extracts folder from where they can be further investigated or run.

You may also create alternate data streams using Stream Detector. Select File > Create File Alternate Data Stream to start the process.

create alternate data stream

Pick a host file, the file that you want to join with it, and a stream name to create a file with an alternate data stream.

Closing Words

Stream Detector is a handy program to detect, extract and create alternate data streams. While that is the case, it is not the only program that does that.

It is also mildly annoying that the program opens a page on the developer website after installation automatically without giving users the chance to prevent this from happening.

 

This article was first seen on ComTek's "TekBits" Technology News

HOME