@conference{62086, author = {Alden Dima}, title = {A Win32-based Technique for Finding and Hashing NTFS Alternate Data Streams}, year = {2007}, month = {2007-01-24}, publisher = {DoD CyberCrime 2007 Conference}, url = {https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=50914}, language = {en}, }