Daily Blog #402: Solution Saturday 6/23/18 - Hacking Exposed Computer Forensics Blog
pdf - What are these extra /Zone.Identifier files created during Windows Remote Desktop file transfer? - Ask Different
Malicious Macros and Zone Identifier Alternate Data Stream Information Bypass - CloudSEK
How Windows Determines That the File Has Been Downloaded from the Internet | Windows OS Hub
windows - What are these files like Zone.Identifier:$DATA and how to prevent them? - Ask Ubuntu
ISO Files With Zone.Identifier | Didier Stevens
Solved How do I delete zone identifier files? Windows 10 Forums
Hexacorn | Blog Good Alternate Data Streams (ADS)
Deleting Zone.Identifier Files: What We Know - Software Tested
Zone Identifier Commands | Be4Sec
Zone Identifier == kMDItemWhereFroms? – ThinkDFIR
How Windows Determines That the File Has Been Downloaded from the Internet | Windows OS Hub
How Windows Determines That the File Has Been Downloaded from the Internet | Windows OS Hub
windows - "This file came from another computer..." - how can I unblock all the files in a folder without having to unblock them individually? - Super User
Trusting Visual Studio Projects - Failing Fast
NTFS File Streams | History & Tools | Alternate Data Streams (ADS)
Forensic Analysis of the Zone.Identifier Stream - Digital Detective
Bandizip - How to copy Zone.Identifier information for malware protection
linux - `:Zone.Identifier` files keep on appearing in Windows XP virtual machine - Super User
Table Request: zone_identifier (Windows) · Issue #585 · kolide/launcher · GitHub
Hexacorn | Blog Good Alternate Data Streams (ADS)
Sysmon v11.10 reads Alternate Data Streams – Purple Serendipity
Forensic Analysis of the Zone.Identifier Stream - Digital Detective
Zone Identifier Commands | Be4Sec
Removing Security from Downloaded PowerShell Scripts with Alternative Data Streams - Scott Hanselman's Blog
